Forest Global Training Partners

Cyber Risks · Cisco Talos

Danger at the Retail Point of Sale

Summary: Cisco Talos reported that another major retailer has allegedly been breached, with retailers working to determine whether a large cache of credit card information offered for sale on an underground trading forum came from a systems breach. The post describes a typical POS attack chain in which attackers seek ingress through social engineering, physical access, or compromised local wireless networks, then escalate privileges, move through the network, and disguise malware as legitimate system updates, citing Backoff malware as an example built to steal financial data from POS systems.

What's compelling: Talos notes that recovering from a retail breach can cost into the millions of dollars as systems are investigated, cleaned, and repaired, and that distinguishing stolen-data exfiltration from legitimate traffic is often only possible during a forensic investigation - by which point it is already too late.

Read the original at Cisco Talos ↗

Topics
Malware
Related