G-data "BankGuard"

Discussion in 'other anti-virus software' started by Janus, Apr 11, 2013.

Thread Status:
Not open for further replies.
  1. BoerenkoolMetWorst

    BoerenkoolMetWorst Registered Member

    Joined:
    Dec 22, 2009
    Posts:
    4,867
    Location:
    Outer space
    Didn't now F-Secure had banking protection as well. Do you have more info about it? I've looked all over their website and it doesn't say anywhere what it actually does, finally I found this, but it doesn't say much either:
    Banking Protection blocks all non-secure connections while you are doing online banking, adding extra reassurance by guarding against attacks from new, unknown trojans that might occur during an open banking session.
     
  2. fax

    fax Registered Member

    Joined:
    May 30, 2005
    Posts:
    3,899
    Location:
    localhost
    From the description above does not look very impressive protection as many mainstream financial malware out there use secure connections to leak data.
     
  3. The Red Moon

    The Red Moon Registered Member

    Joined:
    May 17, 2012
    Posts:
    4,101
    It seems my important observation about these programs has gone through people like a lightning bolt.

    I ask again.
    How do we know these programs actually work as intended.
     
  4. fax

    fax Registered Member

    Joined:
    May 30, 2005
    Posts:
    3,899
    Location:
    localhost
    Either you wait for some financial malware tests (e.g. MRG) or test it yourself if you have a spare machine to use. :)
     
  5. Charyb

    Charyb Registered Member

    Joined:
    Jan 16, 2013
    Posts:
    679

    The only test I know of is:
    -http://www.mrg-effitas.com/wp-content/uploads/2012/06/MRG-Effitas-Online-Banking-and-Endpoint-Security-Report-20121.pdf
     
  6. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,024
    Location:
    Christchurch, UK
    A little more info here;

    http://www.f-secure.com/en/c/docume...997-cdb3-4434-85a7-74c310d7df43&groupId=20893
    http://community.f-secure.com/t5/Security-for-PC/What-is-Banking-protection/ta-p/17318
    http://www.f-secure.com/en/web/operators_global/banking-protection
    http://www.v3.co.uk/v3-uk/news/2224582/fsecure-releases-antihacker-banking-protection-tool
     
  7. BoerenkoolMetWorst

    BoerenkoolMetWorst Registered Member

    Joined:
    Dec 22, 2009
    Posts:
    4,867
    Location:
    Outer space
    Thanks, that gives some more clarity. It doesn't look like very professional protection though. So basically, during banking it blocks your PC from connecting to anything else so a banking trojan cannot send out your private information. But apparently it only blocks insecure connections, so it's easily bypassed by malware using secure connections. Also, what's to keep the malware from sending out the info(login details) later, when the session has ended and traffic is allowed again? And it will only stop malware that sends the info, not other types. Here in the Netherlands, a lot of banks use two-factor authentication with a token generator device so there is no username+pass easily stolen, however most banking trojans use MitB attack these days, so there is no need; the user signs in to his banking account using two-factor auth. then he for example transfers money to another account to pay for something, when he clicks the send button the malware will alter the amount of money and the destination account, once the bank sends back the traffic to the browser, it will show a authentication screen including the details about the transfer, but before it shows up to the screen the malware will edit it again so the user does not notice anything and signs the transaction using the token generator. So, no need for malware sending out personal info and the cybercriminals have stolen money while F-Secure failed to protect.
     
  8. Macstorm

    Macstorm Registered Member

    Joined:
    Mar 7, 2005
    Posts:
    2,642
    Location:
    Sneffels volcano
    Thanks for the confirmation.
     
  9. silverfox99

    silverfox99 Registered Member

    Joined:
    Jul 14, 2006
    Posts:
    204
    You make a fair point. F-Secure did not perform well in the last MRG test it participated in. Failed all four tests - and these test are specific to online banking style data capture, which you might expect a 'banking protection' module to prevent:

    http://www.mrg-effitas.com/wp-conte...anking-and-Endpoint-Security-Report-20121.pdf

    Anyone know if G-Data 'BankGuard' been tested by 3rd party yet? No doubting Rapport performs consistently well in prevention of data capture in online banking.
     
    Last edited: Apr 23, 2013
  10. JerryM

    JerryM Registered Member

    Joined:
    Aug 31, 2003
    Posts:
    4,306
    I appreciate the tests. I am surprised that with the number of people who do online financial transactions that more are not compromised.

    Not very many applications passed.

    Jerry
     
  11. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,024
    Location:
    Christchurch, UK
    This maybe because the Banking protection was not available at the time of testing (October) as it was only released in November of 2012;

    http://news.softpedia.com/news/F-Se...ity-2013-with-Banking-Protection-306604.shtml
     
  12. silverfox99

    silverfox99 Registered Member

    Joined:
    Jul 14, 2006
    Posts:
    204
    You may well be correct. The release notes for F-Secure IS Release 3:

    http://www.f-secure.com/en/c/document_library/get_file?uuid=cc9294c6-fc59-485c-99c9-0f9c14cbfcf9&groupId=20893

    Interesting comment in known issues: Does banking protection work with IE & XP? (See page 5/6):

    "Banking protection is not working with Internet Explorer in Windows XP (CTS-90547) User that are using Internet Explorer with Windows XP are not able to trigger the Banking Protection active." So it may work automatically, you just can't start the protection manually in IE on XP?

    All in all having searched through the F-Secure website for data on the banking protection module, it's all a bit vague as to what the protection actually does, and how it is an improvement on previous releases of F-Secure IS.

    *Update
    On a more positive note for F-Secure IS, it was one of the few AVs that passed the BBC/MRG banking transaction Test published Feb 2012, i guess even before F-Secure IS had officially upgraded their 'banking protection' module.

    http://www.mrg-effitas.com/mrg-effitas-online-banking-test-featured-on-bbc-click-2/

    See at 09:23 of the video - passed: F-Secure, Kaspersky, Bullguard, Trusteer Rapport and Zemana. So whatever functionality they had in F-Sec IS 2012 it was doing a reasonable job on the transaction protection front anyway, at that point in time of course.
     
    Last edited: Apr 24, 2013
  13. silverfox99

    silverfox99 Registered Member

    Joined:
    Jul 14, 2006
    Posts:
    204
    Here is the notification that appears when F-Secure's banking protection module is activated:

    F-Sec_bank_Protect_notification.jpg
     
  14. jackmccoy

    jackmccoy Registered Member

    Joined:
    May 27, 2010
    Posts:
    10
    "G Data Bankguard is incompatible with Firefox 20.01"

    That's the message from Firefox in the add-ons section. Since IMHO G Data is the single worst av company in providing support for their products, I'm not holding my breath that this will change any time soon.
     
  15. fax

    fax Registered Member

    Joined:
    May 30, 2005
    Posts:
    3,899
    Location:
    localhost
    As far as support informed me in 2014 version you do not need any add on for bank guard to work. Which version of GDATA are you using?
     
  16. The Red Moon

    The Red Moon Registered Member

    Joined:
    May 17, 2012
    Posts:
    4,101
    Most companies try to be very minimal with the after sales support.Once they have your hard earned cash out of your pocket they simply lose interest.
    After all.
    Money makes the world go round and all that jazz.:rolleyes:
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.