4. Criminals in Russia used a vulnerability in Microsoft's server software to add a few Lines of Java code to users' copies of Internet Explorer. The code recorded the users' keyboard activities, giving the criminals access to usernames and passwords at many banking websites. The attacks caused $420 million in damage. Discuss what measures and controls would have minimized the risk with clear justification? Identify the fraud technique used? [5+5]