The passcode, set by default on credit card machines since 1990, is easily found with a quick Google searach and has been exposed for so long theres no sense in trying to hide it.With that, an attacker can gain complete control of a stores credit card readers, potentially allowing them to hack into the machines and steal customers payment data (think the Target ( TGT ) and Home Depot ( HD ) hacks all over again).No wonder big retailers keep losing your credit card data to hackers.Security is a joke.
![]() This latest discovery comes from researchers at Trustwave, a cybersecurity firm. Administrative access can be used to infect machines with malware that steals credit card data, explained Trustwave executive Charles Henderson. He detailed his findings at last weeks RSA cybersecurity conference in San Francisco at a presentation called That Point of Sale is a PoS. Take this CNN quiz -- find out what hackers know about you The problem stems from a game of hot potato. Hack Credit Card Information Software Update The MasterBut no one thinks its their job to update the master code, Henderson told CNNMoney. No one is changing the password when they set this up for the first time; everybody thinks the security of their point-of-sale is someone elses responsibility, Henderson said. Trustwave examined the credit card terminals at more than 120 retailers nationwide. That includes major clothing and electronics stores, as well as local retail chains. The vast majority of machines were made by Verifone ( PAY ). But the same issue is present for all major terminal makers, Trustwave said. A spokesman for Verifone said that a password alone isnt enough to infect machines with malware. The company said, until now, it has not witnessed any attacks on the security of its terminals based on default passwords. Just in case, though, Verifone said retailers are strongly advised to change the default password. And nowadays, new Verifone devices come with a password that expires. In any case, the fault lies with retailers and their special vendors. If you buy a home Wi-Fi router, its up to you to change the default passcode. Trustwave, which helps protect retailers from hackers, said that keeping credit card machines safe is low on a stores list of priorities. Companies spend more money choosing the color of the point-of-sale than securing it, Henderson said. This problem reinforces the conclusion made in a recent Verizon cybersecurity report: that retailers get hacked because theyre lazy. ![]() Hack Credit Card Information Software Software Ended UpA nasty keystroke-logging spy software ended up on the computer a store uses to process credit card transactions.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |