GlitchPOS Creator Offers Instructional Video to Make Deploying POS Malware Easier
Security researchers discovered a strain of POS malware dubbed GlitchPOS that comes with an instructional video to help would-be cybercriminals steal credit card data.
Brand New Bag? TrickBot Malware Adds POS Data Collection Module
Security researchers observed TrickBot malware that utilizes a new capability: point-of-sale (POS) data collection.
Don’t Let a Retail Vulnerability Cause Holiday Havoc
Stores and vendors must make sure they are minimizing the risk of a retail vulnerability ruining the holiday season.
POS Malware Breach Sees Payment Cards Hit Underground Shops
A popular fast-food chain and supermarket were recently breached by POS malware. Some of the credit card details had been up for sale for more than a week.
POS Attacks Possible as Different Types of Malware Infect 4,000 ElasticSearch Servers
Kromtech Security found different types of malware that infected more than 4,000 ElasticSearch servers. Other security experts found additional risks.
Chipotle Data Breach Investigation Shows Fraudsters Aimed at Endpoints
Chipotle released the results of an internal investigation that revealed poor endpoint security and maintainance was to blame for a data breach.
New POS Malware Leverages Modular Sleight of Hand to Exfiltrate Card Data
Time for a show? New POS malware MajikPOS uses modular sleight-of-hand tricks and a variety of methods to gain system access for credit card info access.
Floki Bot: Funny Name, Financial Nightmare?
Floki Bot is more versatile than most banking Trojans because it uses spear phishing methods and the RIG exploit kit to steal credit card track data.
Malware Threats Go Where the Money Is
Legendary bank robber Willie Sutton famously explained that he robs banks “because that’s where the money is.” Cybercriminals are taking a page out of Sutton’s book, targeting point-of-sale (POS) systems, whether physically...
Point-of-Sale Data Breach Goes to the Cloud
During a recent point-of-sale data breach, attackers made off with client data regarding products, sales, passwords and electronic signatures.