The Federal Financial Institutions Examination Council mandated that banks enhance their security controls beyond the static username and password authentication scheme for online banking login in its Authentication in an Internet Banking Environment guidance. In 2005, many U.S. banks still use static credentials, but IBM Security determined that it is a distant relative of the Gozi malware. Prinimalka-Gozi reportedly will be used in a massive, coordinated attack on. banks called Project Blitzkrieg by its alleged mastermind, vorVzakon”]

