Home Depot Hit By Same Malware as Target
Summary: The apparent card breach at Home Depot was aided by a new variant of BlackPOS, the same point-of-sale malware found on Target's registers in December 2013, according to sources close to the investigation. Cards stolen from Home Depot shoppers turned up for sale on Rescator[dot]cc, the same underground shop that sold cards from the Target attack, and Trend Micro reported spotting the new BlackPOS variant on Aug. 22 with added features for capturing card data from device memory and disguising itself as antivirus software.
Key Takeaway: The new BlackPOS variant was created on June 22, 2014, and as late as Aug. 15 only one of more than two-dozen anti-malware tools detected it as malicious - meaning the malware on Home Depot's registers had a two-month head start over most of the detection stack.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026