Cybercriminals are using the Zeus online banking malware to target companies that use cloud-based payroll services, researchers say. The malware steals user IDs, passwords and company numbers when users authenticate on Ceridian.powerpay.ca website. The attackers can add fake employees in the payroll system and transfer considerable sums of money to accounts the criminals control. The authentication protection measures used by payroll services lag a few years behind those used by online banking websites, security firm Trusteer says. Trusteer expects payroll services to become increasingly targeted by cybercriminals.”]