How secure is secure?

[tomcat76 327]

It is possible to pick up a key logger just by "driving by" the wrong website, depending on what OS you're running, what browser you're using how well patched and up-to-date they are, what other security software you're running (and how patched & up-to-date THEY are), configuration settings, and what you click on at the affected website... You could also have gotten it from an email (or an attachment to one, or clicking on a link in one). You can pretty much get them in the same way (i.e., using the same vectors) you get a virus or a trojan. If it's a shared PC, any user with admin privileges can of course install one (and it'll affect everybody). Key loggers usually interface with the OS at a very low level and are often undetectable by AV software and other anti-malware, even with active scans. Nasty stuff. If you have one that was detected by Spybot or some other security software, you're lucky.

 

Reformatting the hard drive and re-instaling everything isn't quite the cure-all it used to be, but should get rid of key-loggers.

[Severn 109]

I quite like the Kasicorn Bank approach of sending a code via SMS to your mobile. You have to enter that one-time only code to confirm most banking transactions other than viewing your balance.

 

It means keeping a Thai SIM active in your phone when you are overseas and want to transfer funds.