Cyber Risks · Krebs on Security

Beware Keyloggers at Hotel Business Centers

Summary: A July 10, 2014 advisory from the Secret Service and DHS's NCCIC warned the hospitality industry that suspects arrested by a Texas task force had compromised computers in several major hotel business centers in the Dallas/Fort Worth area, using stolen credit cards to register as guests and then running keylogging malware from Gmail accounts on the public PCs. The malware captured keystrokes of other guests and emailed the data to the attackers' accounts, yielding PII, bank and retirement logins, and personal webmail credentials.

Key Takeaway: The advisory's own recommended fix - restricting guests to non-administrator accounts - will not stop keyloggers that install just as easily on a standard user account, and Microsoft's law #3 holds that unrestricted physical access means it is not your computer anymore.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related