The incidents are part of a larger trend of cybercriminals targeting financial institutions directly instead of customers
Automatic proxy configuration requests frequently leak on the public Internet from corporate computers
New version fixes known flaws and adopts new exploit kit-based distribution model
The vulnerability has been known for almost a year, but many users haven't applied the patches
The flaws can be exploited with specifically crafted HTTP requests to cause denial-of-service conditions
The data includes hashed passwords for 117 million accounts and likely dates back to 2012
The malware can record the details of payment cards inserted into ATMs and can force them to dispense cash
The flaw could be exploited by simply sending a malicious email or tricking users to visit a link
The malware replaces search results with ones from an affiliate program
The master boot record killer now can install a second file-encrypting program
