Re: [escepticos] De informática médica...

[Borja Marcos]

On 6 Oct 2010, at 18:19, Paco Gaspar wrote:

> Si me tienen que mandar un SMS al móvil con el código de verificación para
> cualquier cosa, me dará lo mismo que me roben o dupliquen la tarjeta, porque
> no tendrán acceso al código de verificación solicitado.

Depende del grado de sofisticación de tu teléfono. La idea no es ciencia espacial en absoluto.

http://www.theregister.co.uk/2010/09/27/zeus_mobile_malware/

ZeuS attacks mobiles in bank SMS bypass scam
Security researchers have warned that cybercrooks might be able to compromise online bank accounts even in cases where banks use SMS messages to authorise transactions.

The approach relies on first compromising a targeted user's computer using a variant of the ZeuS banking Trojan before infecting the same user's smartphone. Thereafter it would be possible to initiate a transaction and authorise it following the receipt of an SMS message to a second compromised device.






Borja.