Like Swiss Emmental cheese, the ways your online banking accounts are protected might be full of holes. Banks have been trying to prevent crooks from accessing your online accounts for ages. Passwords, PINs, coordinate cards, TANs, session tokens – all of these were created to help prevent banking fraud. We recently come across a criminal operation that aims to defeat one of these tools: session tokens. Here’s how they pull it off.
more here...........http://blog.trendmicro.com/trendlabs-security-intelligence/finding-holes-operation-emmental/
more here...........http://blog.trendmicro.com/trendlabs-security-intelligence/finding-holes-operation-emmental/