Hackers used cheap, off-the-shelf malware to breach security at U.S. Target stores and compromise data for more than 110 million customers, a tech website said.
Target confirmed last weekend malicious software was embedded in point-of-sale equipment at its checkout counters to collect secure data as credit cards were swiped during transactions. Brian Krebs, of the Krebs on Security website, reported Thursday the malware has been determined to be BlackPOS -- also known as "reedum" -- which uses a memory-scraping technique to collect secure data, temporarily stored in Windows OS computers during a transaction.
BlackPOS likely comes from Russia, and can be bought for about $1,800, Forbes reported.
Data on cards' magnetic stripes are encrypted when sent from POS terminals to financial institutions for verification but the memory-scraping malware snags the information while it is temporarily "parked" as plain text in POS terminals.
More than 50 people are confirmed dead and almost 3.5 million are without power on Saturday,...
More than 40 people have been killed in Hurricane Helene’s deadly rampage through south-eastern US, according...
Two Wisconsin brothers who spent the last 25 years in prison after being wrongfully convicted of...
