New bank scam/malware exploit

This is a new twist on a tried and true method of scamming businesses and individuals. And its being very successful. http://go.cfo.com/tgK52202Lz0u800AHa0009z I just had my Controller sit down with all that have access to the company's accounts (whether read-only or not) to discuss this article. Lesson-learned here is a) never give out your password to anyone, period and b) never give the token info (seed value) and lastly c) never ever give them together! Given the increase of banking fraud, I have moved the client to a piece-meal bank reconciliation schedule (depending on activity, daily but no less than weekly). This has two effects, 1) we can catch fraud quickly and stop its activity and 2) the month-end reconciliation is basically done, more accurately and saves time. Based on your technology, accuracy and time savings will vary (this accounting system doesn't interact with the bank, so we have to do it more on the old fashion way then the new fangled way).