How about a software that is sophisticated enough to bypass chip, pin and other layers of security at your bank, then once it has access knows not to drain the account to trigger reviews. Slowly over time it bleeds your accounts. Worse part is that even though banks normally compensate for hacked accounts – this software can operate for so long without detection that by the time you catch on the banks will not cover your loss.