"Many pieces of the puzzle are still missing though: how the attackers sent the fraudulent transfers; how the malware was implanted; and crucially, who was behi

"Many pieces of the puzzle are still missing though: how the attackers sent the fraudulent transfers; how the malware was implanted; and crucially, who was behind this." Well, we have a clue for piece #2: "... sends result to attacker domain over HTTP" How the hell does that happen in this day and age? You trust any traffic coming out of your network??