A closer look at a strangely named piece of malicious software shows it makes crafty use of drive-by downloads and Web injections to fool users into complicity with online banking fraud.

As mobile wallets become more popular they'll also become more popular targets for fraud. Banks ought to improve enrollment guidelines and other security tools in plotting their mobile-wallet strategy.

Cyberthieves using malicious software discovered by IBM Security have stolen $4 million from business customers of two dozen financial services providers this month, IBM said.

The inadvertent downloading of thousands of consumer records to a thumb drive at the FDIC could happen anywhere. Here's a look at what the FDIC did right and what it could have done better.

Data breaches have become scarily commonplace. But even small financial institutions can take action to thwart hackers and minimize losses.

A former Federal Deposit Insurance Corp. employee took off with data on some 44,000 customers of closed banks when she left the agency in late February, according to an agency memo uncovered by The Washington Post.

Despite email filters and training programs, bank customers still click on fake emails and malicious links at an alarming rate. Newer technologies and methods hold promise for getting phishing under control.

Ryan Singer, CEO and cofounder of startup Blockchain Health, discusses the problems with the traditional "shared secrets" method of verifying identities, and the possibilities opened up by mobile computing devices.

Hackers penetrated the computer network of a Verizon Communications subsidiary, but the company says it plugged the hole before much data was compromised.

Asking for static information like a mother's maiden name seems increasingly passé, since shared "secrets" can be stolen or gleaned from the Internet. But without a brilliant alternative, and done with care, knowledge-based authentication still has value.