[F-Secure] Man-in-the-Middle Attacks on Multiple Finnish Banks

Multiple man-in-the-middle attacks are currently underway against at least two Finnish banks: Nordea and Osuuspankki.

Both banks use one time passwords and verification codes, so run of the mill phishing yields little of value to an attacker other than the account number. But in this case, the attacks are connected to a server-side man-in-the-middle attack that attempts to complete a banking transaction.

Read more
Source: http://www.f-secure.com