Forest Global Training Partners

Cyber Risks · Krebs on Security

Email Attack on Vendor Set Up Breach at Target

Summary: The Target breach that exposed credit card and personal data on more than 110 million consumers appears to have begun with a malware-laced phishing email sent to employees at Fazio Mechanical, an HVAC firm in Sharpsburg, Pa. that held network credentials issued by Target; sources close to the investigation say those credentials were stolen at least two months before thieves began pulling card data from thousands of Target cash registers, with two sources naming the Citadel password-stealing bot though that could not be confirmed.

Bottom line: Fazio's primary method of detecting malicious software on its internal systems was the free version of Malwarebytes Anti-Malware, an on-demand scanner with no real-time protection whose license prohibits corporate use - and a former Target security team member said only vendors in the highest security group, those directly accessing confidential information, would be given a one-time token or other two-factor authentication.

Read the original at Krebs on Security ↗

Topics
Malware
Related