Rapport silently protects data exchanged during web banking sessions including usernames, passwords, and account information against malware and financial Trojans such as Zeus, URLZone, Clampi, and others. In addition, Zions Bank is using Flashlight, Trusteer's new remote fraud investigation and mitigation service. Flashlight identifies the attack source on customer machines, remotely gathers samples, and can reverse engineer the mechanism used by the malware to commit fraud. Findings will enable Zions Bank to prevent future losses, block subsequent attacks, and takedown command/control servers.

"Trusteer's unique ability to protect our online banking customers' personal information and provide the information we need to mitigate suspected fraud incidents is extremely valuable from both end-user security and loss-prevention standpoints," said Matt Wilcox, Zions Bank Interactive Department manager. "Trusteer helps us kill two birds with one stone. With Rapport we can help customers lock down their browser to keep out malware, while the Flashlight service performs ongoing incident analysis and enables us to remotely gather forensic data to investigate fraudulent activity and prevent attacks in the future."

Flashlight: Cloud-based Fraud Investigations

To respond to fraudulent activity in real-time, Zions Bank is using the Trusteer cloud-based Flashlight service to investigate devices suspected of being compromised by malicious code. When the bank detects suspicious activity on an account that is not already protected by Rapport, it requests the customer run a lightweight investigation program. Once installed, Flashlight immediately identifies the malware, or in the case of an unidentified variant, detects suspicious malware behavior and lifts a sample or samples from the computer. These are then examined and reverse engineered by Trusteer's fraud and malware experts to identify the mechanism used to commit fraud.

Following the analysis, Zions Bank receives a full report on the malware, the complete source code for future reference, and detailed recommendations on how to detect and block future attacks. In addition, Trusteer reports the malware to all desktop security vendors for industry-wide protection, performs ongoing analysis of associated command and control servers, and submits them to takedown services. Trusteer Flashlight includes ongoing consulting by Trusteer's security experts with Zions Bank's IT security team to help mitigate future threats.

"Banks often know when customers' machines are infected with sophisticated malware, yet they have no mechanism to remotely investigate which malware is present and how it is bypassing their security controls," said Mickey Boodaei, CEO of Trusteer. "Trusteer Flashlight enables Zions Bank, within minutes, to find out whether malware is present on a customer's machine and then fingerprint and block its actions."

Rapport: Secure Browsing Service

Rapport from Trusteer is a lightweight browser security solution that prevents criminals from tampering with website communications and transactions, and protects against man-in-the-browser, man-in-the-middle, and phishing attacks. When a Rapport user browses to sensitive websites such as internet banking, Webmail, or online payment pages, Rapport immediately locks down the browser and creates a tunnel for safe communication with the web site. This prevents malware from injecting data and stealing information entered and presented in the browser. Trusteer also offers in-the-cloud reporting services. When unauthorized access attempts are detected by Rapport, these are analyzed by Trusteer fraud experts who provide actionable intelligence to customers.