[ngrilly]

That’s why most banks ask you to approve transactions with an explicit reauthentication.

[josephcsible]

Then the malware will just wait until you want to do something legitimate that needs that, and then swap it out for its own thing.