Extracting actionable data from banking malware

This article will open the door on modern banking malware, giving readers an understanding of what this kind of malware can do and how it works.
We will help the reader gain a deeper understanding of banking malware based on the forensic artefacts left behind after execution, so that network defenders can better protect against future infections and thoroughly understand the consequences of a compromise.
We will define actionable data, demonstrate how it can be extracted from banking malware, and describe how the reader can use this data to help defend against highly damaging cyber attacks from organised criminal gangs.