What is malware resistance ?

Malware is a generic term for software created by criminals to exploit end users. Malware comes in many forms, but with payments the target is typically to steal credentials, capture data such as text messages used for OTP codes or to modify banking software to trick users into approving fraudulent transactions. 

There are many mechanisms that can help provide malware resistance: 

- Secure execution environments; 

- Honeypots to tempt attackers into targeting the wrong targets
Integrity tests to verify that there is no tampering; 

- Strong, verified, cryptography to ensure that communication is correct; 

- Dynamically changing environment so that one attack does not transfer to all other devices; 

- Obfuscation, to make the executable code on the device harder to analyse; 

- Behavioural biometry mechanisms, such as analysing the movement of a device during SCA. 

In general, the operating system on the device should be trusted as little as possible, and as much as possible should be verified on the server-side, where the environment can be considered secure.