(Update: probably false pos) VoipCheap caught taking a screenshot of internet banking

RussJK · 22 September 2009 at 12:15PM

Trusteer Rapport is a protection program that our bank has recommended (anti-phishing, keystrokers, etc). It caught VoipCheap attempting to take a screenshot while I had the protected internet banking open. I had only just installed both programs. The log entry is below in italics:

"The following processes tried to capture an image of a protected website. Rapport blocked these screen capture attempts. These processes are not necessarily malicious. Some applications may take screen shots as part of their regular operation. There is no action you need to take. Rapport will continue blocking screen capturing attempts as long as sensitive information is presented.

Sep 20 2009 13:18 VoipCheapCom.exe is permanently blocked from capturing sensitive data"

According to a Trusteer rep I wrote to, Rapport will only intervene to stop a screenshot if any of the 32 websites it protects by default are open on screen (i.e. my internet banking). I tested and confirmed such behaviour - if any part of internet banking or another protected website is on screen, then Rapport will prevent the screenshot when a program does it. If the website is covered by another window, then it won't worry about preventing the screenshot. So VoipCheap must have taken a screenshot while internet banking was on screen for it to active the protection program.

So the question is, why is VoipCheap even taking screenshots in the first place? I've emailed the VoipCheap company to account for this behaviour.

redux · 24 September 2009 at 11:13PM

Well, Google shows you are the only person in the world posting about this problem so far

I hadn't heard of the software you are using, but in a few minutes I've found people mentioning occasional problems with it and IE8 (the recent pages dropdown didn't work, and although Trusteer released a fix, it didn't download automatically), with it crashing some versions of Firefox, as described by Mozilla, with Kaspersky Internet Security, which identified it as a keylogger, while in turn Trusteer allege that Kaspersky only identifies 44% of security risks, which is the top mark beating for example both McAfee and Symantec with 23%

http://www.virusbtn.com/news/2009/04_22.xml is an article titled Banking sector confuses users over online safety, which discusses the last issue further, and questions the methodology of the testing system quoted from by Trusteer, as authored by the Okie Island Trading Company.

I suggest you might contact Trusteer Support and ask them if what you are experiencing might be a false positive.

I'd also contact the bank and ask if they carried out any comparative tests themselves

Jemma-T · 3 October 2009 at 10:43AM

I don't think I'd have VOIP on the same PC as I log into my bank with -or at least have a dual boot OS with the banking or make sure there's no VOIP process running.

It's up to you to look after your details. Best thing nowadays is to have a PC (or laptop) for all the crap and then one 'clean' unit for the really important stuff. Sounds like a hassle but I've done it for years as it's also a good way to back stuff up and allow for full antivirus checks if need be.

Computers are great fun but they're not toys.

(Update: probably false pos) VoipCheap caught taking a screenshot of internet banking

Comments

Confirm your email address to Create Threads and Reply

🚀 Getting Started

Categories

Is this how you want to be seen?

Get our FREE Weekly email full of deals & guides - and it’s spam-free