Just use a whitelisting hardware firewall for all financial work and be done with it. Dedicate a laptop to the work and put it behind said firewall. If Flame was in the wild for years then all the bullshit blacklisting security industries' best stuff is a complete waste... I knew that before Flame was discovered but I didn't realize it was that big of a waste....