Forest Global Training Partners

Cyber Risks · Krebs on Security

Thieves Jam Up Smucker’s, Card Processor

Summary: Smucker's shut down its online store after malware on its web server captured customer names, addresses, phone numbers, credit card numbers and card verification codes during checkout, a breach the company says it only learned of in mid-February 2014. Krebs reports the site was among dozens of e-commerce shops listed as infected in a ColdFusion botnet control panel maintained by the same gang behind break-ins at Adobe, LexisNexis, Dun & Bradstreet, Kroll and the National White Collar Crime Center.

What's compelling: SecurePay, a credit card processor named in that same botnet panel, told Krebs it was unaware of any breach until he sent it roughly 5,000 stolen card transaction records, which the company then confirmed came from its payment gateway, with collection continuing as late as Aug. 26, 2013. The panel also showed some shops compromised in August 2013 still carrying publicly accessible backdoors, and Krebs notes most of the companies he notified had not responded.

Read the original at Krebs on Security ↗

Topics
Malware
Related