Wow! I'm amazed to see that nobody's posted to this thread in 14 1/2
months; I'm not sure what that says.
At any rate, for the benefit of those who both missed
this thread and haven't been advised of it by a financial company with which they deal, Trusteer Rapport is a free offering (from an IBM company) that, among other things, stops man-in-the-middle and man-in-the-browser attacks. (
Edit: It surpasses DNSCrypt's functionality in any number of neat ways.)
Its Mac implementation isn't exactly user-friendly, and its idea of local user security is kind of mystifying, but it apparently does its job, which is what it's really paid to do.
You can d/l Trusteer Rapport
here. (Click on the orange "Bank Customers-?-Click Here" button.)