Forest Global Training Partners

Cyber Risks · Krebs on Security

ATM Skimmer Gang Firebombed Antivirus Firm

Summary: After Russian antivirus firm Dr.Web published a December 18, 2013 writeup on a Trojan designed to steal card data from infected ATMs, a group calling itself the "International Carders Syndicate" emailed a demand to delete all references to the ATM malware within a week. Dr.Web refused, and on March 9, 2014 someone threw a Molotov cocktail at the office of a third-party distributor of its ATM Shield product, with a second attack on the same office shortly after and a third attack on the St. Petersburg office; a suspect seen running from that scene was arrested and later released when no witnesses came forward.

What you should know: Dr.Web's CEO said the group behind the threats was an organized team of programmers that had sold but not yet delivered crimeware to gangs specializing in ATM cash-outs, and that the firebombings were ordered over the internet through a black market for crime - meaning a vendor's published research can put its own offices and partners in physical danger.

Read the original at Krebs on Security ↗

Topics
Malware
Related