Cyber Risks · Krebs on Security

FBI Raids Chinese Point-of-Sale Giant PAX Technology

Summary: FBI and DHS agents raided PAX Technology's Jacksonville, Florida offices and warehouse on October 26, 2021, executing a court-authorized search tied to reports that the Shenzhen-based point-of-sale provider's systems may have been involved in cyberattacks on U.S. and E.U. organizations. A source told KrebsOnSecurity that a major U.S. payment processor found PAX terminals acting as a malware dropper and command-and-control location, with packet sizes that did not match the payment data the devices should have been sending.

Bottom line: PAX has more than 60 million point-of-sale terminals in use across 120 countries, and FIS Worldpay has already pulled PAX devices from its infrastructure and is replacing them at no cost to clients - a decision that coincided with FIS shares falling 6.6%.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related