A First Look at the Target Intrusion, Malware
Summary: Target disclosed that malicious software installed on point-of-sale devices at checkout counters captured card data from the magnetic stripe while it sat in the terminals' memory, in a breach affecting more than 110 million customers. Sources told KrebsOnSecurity the malware resembled BlackPOS, a crimeware product sold on forums for $1,800 to $2,300, and that attackers entered through a compromised company Web server before setting up an internal control server to collect the stolen data.
Key Takeaway: The POS malware went undetected by all 40-plus antivirus tools on VirusTotal at the time it was installed, and the attackers kept persistent remote access to an internal collection server, manually pulling card dumps over a period that began before Nov. 27, 2013.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026