"BrianKrebs September 20, 2010 at 3:12 pm ???From what I understand about Zeus and its many variants; the attacker doesn???t even need passwords or other authentication, they simply hijack the SSL session from the browser after you authenticate." . . . .