Security threats Toolkit
Story: Swedish bank hit by 'biggest ever' online heist
Email is not the only way rootkits get distributed
Rootkits can be imbedded in webpages, any microsoft document, adobe acrobat etc, and the the most worrying part; they have microsoft authorized digital signatures attached, meaning that they do not raise any red flags, when downloaded, as Microsoft explains in this tech bulletin, http://www.microsoft.com/technet/sysinternals/utilities/RootkitRevealer.mspx
they cannot protect windows against rootkits, even using whitelisting(comparing offline scan sumcheck to online sumcheck), which also means they are saying there is no software solution either.
Even Vista allows authorized signatures into its Kernel.
Bottom line? use online banking at your own peril.
Full Talkback thread
