UNIVERSITY MONITORS SECURITY

[BIZ: Aachen, August 25]
The “Red Team” research group at Aachen RWTH University is warning about security gaps in the new iTAN procedure. The new iTAN security feature for online banking promoted by German banks does not protect against phishing attacks and Trojans as claimed. Attacks are still possible, as the group’s penetration tests have shown. TAN are the transaction numbers that confirm banking transactions. iTAN merely restricts the time available for the attack, but doesn’t actually stop them.
http://www.aachener-zeitung.de