A new Federal Deposit Insurance Corporation (FDIC) rule requires banks to notify federal regulators of security incidents within 36 hours.
An attack campaign has targeted financial services using a new type of backdoor since early January, FireEye said.