- Lyft received a whopping 7 sexual assault lawsuits in a day Wednesday 10:00 PM
- High school reopens investigation into Nazi salute video after other racist videos emerge Wednesday 7:14 PM
- Facebook content moderators continue to suffer from brutal working conditions Wednesday 5:58 PM
- #RIPReese: Man bullied for relationship with trans woman dies by suicide Wednesday 4:46 PM
- Redaction error reveals ICE is paying Palantir $49 million Wednesday 4:25 PM
- People are using social media to raise awareness about the Amazon fires Wednesday 4:24 PM
- How to watch ‘Detective Pikachu’ right now Wednesday 3:56 PM
- Walmart is suing Tesla over fires at stores with solar panels Wednesday 3:44 PM
- Jeremy Renner asks nicely for Sony to let Spider-Man back in the MCU Wednesday 2:51 PM
- The best and safest torrenting sites you should be using in 2019 Wednesday 2:47 PM
- ‘Beyoncé’s Assistant for a Day’ creator is releasing more games on storytelling app Yarn Wednesday 1:54 PM
- Why does everyone keep falling for that Instagram and Facebook hoax? Wednesday 1:46 PM
- A bunch of celebrities fell for that viral Instagram hoax Wednesday 1:17 PM
- Former Die Antwoord crew member says video shows ‘homophobic attack’ Wednesday 1:13 PM
- How to stream all the MLS Rivalry Week matches Wednesday 1:13 PM
In December, Target warned customers it had been hacked. During the holiday shopping season, the big box store said, someone had gained access to its customer credit card information. It was a public relations disaster and a stark reminder that even the largest businesses can have security failures.
Then, in January, we learned the hack was far worse than initially reported, affecting up to 110 million people. Just for perspective, that’s over three times the population of Canada and just less than three times the population of California.
According to Los Angeles-based security firm IntelCrawler, it all started with a 17-year-old Russian hacker with ties to St. Petersburg, who is well known in the underground programming community.
IntelCrawler published a statement last week saying the teenage hacker created the malware known as “BlackPOS” last March, and sold it off to an unknown group or groups who carried out the attack on Target, as well as a similar attack on upscale department store Neiman Marcus.
IntelCrawler initially identified the hacker by the wrong name, but updated its report and identified the correct 17-year-old by name and linked to his VKontakte profile (we’re not identifying him by name, as he’s a minor). The security team noted the teen was not the only culpable party: “He is still visible for us, but the real bad actors responsible for the past attacks on retailers such as Target and Neiman Marcus were just his customers,” IntelCrawler President Dan Clements commented in the statement.
Some of the suspected customers who bought and used the malware: Russian mobsters, according to CNN.
In an email to the Daily Dot, IntelCrawler CEO Andrew Komarov warned that more BlackPOS attacks on other department stores are likely imminent, adding that he’d already reached out to Visa, Mastercard, and several U.S. banks. Here are the warning signs he gave them:
– Point-of-Sale terminal showed error or was temporarily disconnected from the host computer
– Active use of network connections through FTP (File Transfer Protocol) during business hours
– Your antivirus software was deleted or stopped, it shows use the error during updates;
– Suspicious files with names «mmon.exe», «well.exe», «mbot.exe» and other;
– New binary files in task scheduler, as bad actors use it for interval RAM scanning
In addition to looking out for these attack signals, Komarov recommended following the steps laid out by a report by iSight Partners detailing the attack. iSight worked with the U.S. Secret Service and released a report urging retailers to call U.S. Secret Service Field Office/Electronic Crimes Task Force.
Now that more information about the malware is known, hopefully retailers can get in front of these attacks before another security snafu. Still, cash is looking mighty appealing right now.
Kate Knibbs is a notable tech reporter and pop culture essayist. A former staff writer for the Daily Dot, her work has appeared in Gizmodo, the Ringer, AV Club, Digital Trends, Popular Mechanics, and Time.