Cyber Risks · Krebs on Security

Data Breach At Oracle’s MICROS Point-of-Sale Division

Summary: A Russian organized cybercrime group tied to the Carbanak Gang breached more than 700 infected systems inside Oracle's MICROS point-of-sale division, including a customer support portal that was seen communicating with a Carbanak server. Oracle acknowledged malicious code in certain legacy MICROS systems and is forcing password resets for all MICROS support portal accounts, while sources say the intruders planted malware that stole customer usernames and passwords at login.

What you should know: MICROS point-of-sale systems run at more than 330,000 cash registers worldwide, and Oracle's own guidance to change passwords used by MICROS representatives to access on-premises systems points at the risk of card-stealing malware being pushed to customer registers. The Carbanak Gang is suspected of stealing more than $1 billion from banks, retailers and hospitality firms.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related