Malware October 3, 2019

Ramnit Targets Japanese Shoppers, Aiming at Top Fashion Brands

4 min read - In a recent analysis of Ramnit Trojan targets, IBM X-Force looked into the way the malware's operators target e-commerce vendors in Japan — the gang's active attack turf nowadays.

Banking & Finance September 12, 2019

How Will Strong Customer Authentication Impact the Security of Electronic Payments?

3 min read - The EU's updated Payment Services Directive, PSD2, will introduce a new technical standard that regulates strong customer authentication (SCA).

Advanced Threats August 29, 2019

More_eggs, Anyone? Threat Actor ITG08 Strikes Again

14 min read - X-Force IRIS observed ITG08, which has historically targeted POS machines in the retail and hospitality sectors, injecting malicious code into online checkout pages to steal payment card data.

CISO June 27, 2019

CISO of Major UK Retailer Weighs in on Enterprise IoT Security

3 min read - Retailers are leveraging the IoT to improve the customer experience, realize efficiencies and grow business. The catch: The more connected devices on the network, the greater the IoT security risk.

March 20, 2019

GlitchPOS Creator Offers Instructional Video to Make Deploying POS Malware Easier

2 min read - Security researchers discovered a strain of POS malware dubbed GlitchPOS that comes with an instructional video to help would-be cybercriminals steal credit card data.

Advanced Threats February 6, 2019

IcedID Operators Using ATSEngine Injection Panel to Hit E-Commerce Sites

8 min read - The X-Force research team investigated the IcedID Trojan's two-step injection attack that enables it to steal access credentials and payment card data from e-commerce customers in North America.

Banking & Finance January 21, 2019

Multifactor Authentication Delivers the Convenience and Security Online Shoppers Demand

4 min read - When framed as an innovative, even "cool" feature, multifactor authentication can deliver the security online retail customers demand without diminishing the user experience.

Data Protection January 3, 2019

The Gift That Keeps on Giving: PCI Compliance for Post-Holiday Season Returns

4 min read - Holiday spending is on the rise both in-store and online. How can retailers ensure PCI compliance to manage large transaction volumes and post-holiday refunds?

December 7, 2018

New Macro Downloaders Use PUB Files to Compromise Food and Retail Companies

2 min read - New macro downloaders are sandwiching spam and .PUB files to compromise businesses in the food and retail sector.

Data Protection November 29, 2018

5 Recommendations to Improve Retail Cybersecurity and Revenue This Holiday Season

8 min read - With extra web traffic and high order volumes coming in, the holiday shopping season can be a particularly perilous time for retail cybersecurity.