POS Providers Feel Brunt of PoSeidon Malware
Summary: A new strain of point-of-sale malware called PoSeidon has been implicated in breaches at companies providing POS services mainly to restaurants, bars and hotels, with POS vendor Bevo POS reporting 13 of its 6,500 customers affected over a two-day period after learning of the incidents on March 15. Banks purchasing their own stolen cards from Rescator and briansdump batches could not find a common point of purchase, because the victims were small merchants whose only shared element was a branded POS device, often remotely accessed by support firms using the same or easily-guessed credentials.
What you should know: Bevo POS said every one of its affected customers ran Windows anti-virus software and none of those products recognized the malware, which scraped card data in the millisecond gap before it reached the POS application. With attackers needing only to plug in malware once to harvest cards from thousands of small merchants, the economics favor them over merchants who decline end-to-end encryption.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026