Understanding and Mitigating the Risks of Financial Malware