Cyber Risks · Cisco Talos

Our coverage for the Recent Point of Sale Compromises

Summary: Target announced on December 19th, 2013 that a sophisticated attack around the Thanksgiving holiday stole information on over 40 million credit and debit accounts, potentially affecting up to 110 million customers. Cisco Talos describes PoS malware as a commodity that can sell for as much as $40,000, following a pattern of network entry, infection of PoS terminals, memory dumping, and offloading data to a remote server, and lists coverage for samples including BlackPOS, Chewbacca, Dexter, Trackr/Alina, and VSkimmer.

What's compelling: The same 40-million-record theft that hit Target in 2013 echoes TJX in 2007, and PoS malware sold for up to $40,000 means variants of one sample can be run by several unrelated attackers against your terminals.

Read the original at Cisco Talos ↗

Topics
Malware
Related