Friday, April 23, 2010

Journal 4 - Avoid Windows Malware: Bank on a Live CD

Brian Krebs of Security Fix brings up some very interesting responses to best ways to protect businesses from malware. Simply put he says stop using Microsoft Windows when accessing your bank account online.
He has interviewed dozens of victim companies that have lost anywhere from $10k to $500k because of a single malware infection. He recommends this because he says "Virtually all of the data-stealing malware in circulation today is built to attack Windows systems, and will simply fail to run on non-Windows computers". The solution, malware that is built to steal data from Windows-based systems won't load or work when the user is booting from Live CD. Put simply: even if the Windows installation on the underlying hard drive is completely corrupted with a keystroke-logging virus or Trojan, that malware can't capture the victim's banking credentials if that user only transmits his or her credentials after booting up into one of several effective Live CDs. I highly recommend you go directly to his article because he makes a very convincing proposition in answering "How do we protect ourselves from malware".