back in late 90s, EU FINREAD standard included countermeasure to compromised PCs of this type (I even attended EU FINREAD standard meeting in Brussels that included demos of prototypes) ... aka is what you see the real transaction.

even earlier, in industry meetings from the mid-90s, there were presentations by consumer online dial-up banking entities about moving to the internet (primarily to eliminate the significant customer support costs of proprietary dial-up infrastructures) ... however at the same time, the cash-management/commercial dial-up banking operations were claiming they would never move to the internet because of long list of vulnerabilities (including this).