Test of banking mode in modern antivirus solutions

Analysis of banking and online payment protection modules

ico Test of modules to protect online banking
AVLab CERT internet banking protection 2026

Dedicated protection for online payments is designed to secure you finances, personal information, and protect against cybercrime. This increases of the level of protection for banking services and online transactions. You have more confidence that your money and data are safe.

The main objective of the test is to verify modules for repelling attacks on online banking, regardless of the original protocol for initiating the cyberattack. We use real malware in simulated scenarios to perform the analysis. The main goal of the testers is to steal information from the device which is additionally protected by antivirus software when using a dedicated banking (online payment) protection mode.

What do we look out for during this test?

The software must provide blocking of attacks in test scenarios at a high level which is necessary to receive an appropriate recommendation. The test covers the following areas:

Preventive Protection

We check whether the software sufficiently protects the user's online session against accidental leakage of confidential information as a result of malware running in the background.

Responding to Attacks

The test evaluates whether the software is able to respond appropriately to attacks in real time, in addition, whether the notifications are clear and precise to a user.

Who are these tests for?

The evaluation of tested solutions is aimed at security software developers and users who are looking for comprehensive security of their finances.

The test ends with the award of a certificate, and the results and conclusions can help you choose the solution that best meets the high requirements.

The final report indicates the strengths of the product, and additionally shows whether the solution meets certain standards. As a result, it can have a positive impact on customer decisions related to product selection.

How do we test?

Threats used in the test are so-called potentially dangerous 0-day software which is unknown to developers on the day of testing. This is a good situation, because in this way it is possible to test the solution against something completely new.

In test scenarios, we do not disable antivirus protection, because user security would be put at risk if certain components were deactivated. Such a test would not reflect the real scenario of using the security suite.

Most modern antivirus software for macOS and Windows provides basic security for banking and online payments. Such technologies include, for example: antiphishing, antimalware, antikeylogger, antiscreenlogger, blocking connections of untrusted applications and scripts, detecting system changes to DNS servers, and others. However, some developers offer the user a so-called specialized module which has been programmed to protect the system when performing online payments or other important and confidential operations on files and data.

Examples of test scenarios

Examples of test scenarios that will be applied to software with protection enabled for the online payment module or banking mode:

Capture the clipboard
Replacing the clipboard
Keystroke logging
Screen logging
Remote control software detection
Storage data theft detection
AVLab CERT internet banking protection 2026

Internet Banking Protection Test Certificate

We award those developers who perfectly respond to cyberattacks reproducing the theft of payment data, or even the manipulation of information by banking Trojans.

Developers Certified in The Last Edition

avast logo

AVAST Premium
Bank Mode

Comodo-logo.svg

Comodo Internet Security Pro
Secure Shopping

f secure logo

F-SECURE Total
Bank Mode

kaspersky logo

KASPERSKY Plus
Safe Money

mks vir logo

MKS_VIR Internet Security
Safe Browser

Norton logo 2021

NORTON 360

AVLab CERT internet banking protection 2026

Why is it worth having the certificate?

Join the developers certificated by the independent organization.

Use the certificate for marketing purposes, e.g. place it on your website, promote your company in a magazine, allow potential customers to see that you own a reputable solution.

Safely test out your solution in a controlled environment.

Receive feedback and improve the effectiveness of your security product.

Cooperation

How do I join the Banking Protection Test?

1

Initial Conversation / Mail

Setting priorities, presenting our capabilities, and terms of cooperation.

2

Product Analysis

If the solution requires a license or appropriate configuration, the developer must provide details.

3

Testing

Testing a product in a configured environment.

4

Output Information

Upload detailed telemetry from the test.

5

Obtaining a certificate

Possibility to using the awarded certificate.

What are your guarantees
of a reliable test?

We have been dealing with testing and cybersecurity since 2012. During this time, we have performed hundreds of tests that have allowed us to improve the products of the largest developers on the market.

We are affiliated with the prestigious AMTSO (Anti-Malware Testing Standards Organization) which upholds the standards of conducting security tests. As part of our functions in the international community of experts, we work on improving the transparency, objectivity, and quality of security software tests.

View one of AMTSO’s latest compliance reports

avlab cybersecurity foundation
Contact with AVLab

Cooperation & Contact

We invite all interested developers and providers of security solutions for individual customers, and for medium and large companies to work with us. We encourage you to get familiar with our offer and opportunities for cooperation.

Examples of test scenarios

Examples of test scenarios that will be applied to software with protection enabled for the online payment module or banking mode:

CAPTURE THE CLIPBOARD

REPLACING THE CLIPBOARD

KEYSTROKE LOGGING

SCREEN LOGGING

REMOTE CONTROL SOFTWARE DETECTION

STORAGE DATA THEFT DETECTION

Test Participation & Certification Options

Vendors can participate directly in the Advanced In-The-Wild Malware Test or obtain a Certification-Only Package for a product independently tested by AVLab. Paid participation provides access to extended technical services, test data, and custom configuration options, while result review and verification remain available to all tested vendors.

Advanced In-The-Wild Malware Test - What Is Included?

Paid Assessment Participation
Certification-Only Package

GENERAL

Advanced In-The-Wild Malware Test
Previously performed by AVLab
Public test results
Certification, if criteria are met
Annual awards, if eligible

RESULT REVIEW & TRANSPARENCY

Result review and clarification
Available to all tested vendors
Available to all tested vendors
Evidence necessary to verify a disputed result
Available to all tested vendors
Available to all tested vendors
Vendor commentary and response
Available to all tested vendors
Available to all tested vendors

TEST PREPARATION & CUSTOM CONFIGURATION

Product onboarding and configuration review
Not applicable
Vendor-recommended product configuration
Not applicable
Custom logging configuration
Not applicable
Vendor-requested technical logs
Not available retroactively

TECHNICAL SERVICES AND DATA

Detailed technical analysis
Available separately
Detailed test data
Available separately
API access to test data
Available separately
Evidence & technical logs
Available separately
Additional validation and retesting
Depending on scope
Available separately
Technical consultation with AVLab
Available separately

CERTIFICATION & MARKETING RIGHTS

Official certificate issued by AVLab
Certification badge
Use on vendor website
Use in social media and PR
Use in sales and marketing materials
Annual award materials, if eligible

Commercial use of AVLab certificates, certification badges, and award materials by independently tested vendors requires either Paid Assessment Participation or a Certification-Only Package. Independently tested vendors without either option may be listed in AVLab results and certification records but are not granted the right to use AVLab certification materials in their own marketing or communications.