The new SpyEye variant is attacking targets in the United States and the United Kingdom using the well-known man-in-the-browser method of capturing login credentials with a tactic called HTML injection. HTML injection inserts new fields into a Web page that phish for customers' credentials.

There are ways of avoiding SpyEye, and its close cousin Zeus, which has been responsible for millions of compromised bank accounts. Start by running up-to-date anti-virus software on your computer, and make sure you log in to your bank's online portal through a secure, encrypted connection.