Welcome

The next generation web banking threats will inevitably be directed at mobile devices - and since several mobile platforms implements unconventional security architectures, IT criminals are bound to introduce new attack strategies. This is especially the case with the iOS platform which incorporates a unique security architecture while also being widely distributed.

For the IT criminals, apps for iOS holds a great opportunity to widely distribute malicious code which is why the apps are expected to be the main future attack vector for iOS.
As on windows, the possible threats includes hooking the web banking app processes to steal account information or modify transactions. Also the Safari browser process can be hooked in order to steal credit card data during online purchases.

On jailbroken devices this form of attack requires not more than the ability to run code on the device, a task accomplished easily with hidden code inside a seemingly innocent app, inside "cracked" versions of popular apps or exploiting the vast amounts of insecurely coded apps available on the AppStore.

The TrustR app by Rookie Systems/Optimize Nordic is built to overcome these issues and works by detecting any such security compromising apps on a system.

Further more, a TrustR plugin library is being developed to be included in apps with higher security requirements.

TrustR by Rookie Systems is collaborating with Optimize Nordic - PicacaInvestment Group.