ComputerRepairTech
Well-Known Member
- Reaction score
- 804
- Location
- Columbia, SC
Chances are someone working for them is responsible for loading malware into the POS terminals.
I think thats very likely.
Chances are someone working for them is responsible for loading malware into the POS terminals.
It has been confirmed on target's website:
This is not the first time something like this has happened this year.
Dexter payment card malware strikes South Africa
Dexter malware returns with a vengeance
Huge cyber bank theft spans 27 countries
Cyber crime has hit an all time high this year HUGE amounts of money stolen they really need to increase security in the US the tech they are using is 30 years old.
It is now verified they got the pin as well the spyware would have to be in the card terminal and keys logged on pin pad because they use Triple DES algorithm that is sent to card processing facility only they have the key to decrypt it.
Target claims that the PINs remained encrypted after they were stolen.
The pilfered PIN's were encrypted. From the article link you posted.
Putting a keylogger/malware on a pin pad would be incredibly difficult. They would have to have penetrated the entire chain, down to the POS terminals to access the pin pads at all of the stores.
All of the pin pad hacks I have read about had the black hats modifying a pin pad on hand and then swapping it out at the store. A recent article about that.
http://storefrontbacktalk.com/secur...ng-card-data-theft-is-now-all-about-pin-pads/
The pilfered PIN's were encrypted. From the article link you posted.
Putting a keylogger/malware on a pin pad would be incredibly difficult. They would have to have penetrated the entire chain, down to the POS terminals to access the pin pads at all of the stores.
All of the pin pad hacks I have read about had the black hats modifying a pin pad on hand and then swapping it out at the store. A recent article about that.
http://storefrontbacktalk.com/secur...ng-card-data-theft-is-now-all-about-pin-pads/
What if the malware was injected by some one working in the factory where they were made prob china?.
There are instances where mp3 players made in china were loaded with spyware in factory to steal online game passwords as soon as you plugged them into a pc.
http://storefrontbacktalk.com/securityfraud/thousands-of-cards-compromised-at-retailers%E2%80%99-pos/
What if the malware has the capability of reading the pin pad memory before the pin get's encrypted.
Yeah but didn't Barnes and Noble have exactly that happen just this year?
USA Today reporting that Target's data breach was bigger than originally thought.
http://www.usatoday.com/story/money/business/2014/01/10/target-customers-data-breach/4404467/
Over 70 Million Customers exposed.![]()