A pop-up window appears requiring additional authentication when you log in to do some online banking. Is it friend or foe? You need to be extra careful -- even at your own bank's website!
Chase warns that criminals have apparently figured out a new way to steal that is really both very clever and diabolical at the same time, and it goes way beyond simple phishing.
At some point you end up with a virus on your computer, without even realizing it. That virus stays latent until you sign in to do online banking.
When an infected computer logs into Chase.com, a pop-up window appears that seems to be asking for multi-step authentication. It looks like they're trying to verify who you are by asking for your driver's license number, Social Security number, date of birth, and even ATM card number.
So you enter the info, click to continue, and then you're on your bank's site as normal. Now the crooks have everything they need to take over your account and do an outbound wire transfer, or engage in full blown identity theft, or any combination of the two thereof.