POINT-OF-SALE CYBER ATTACKS ARE BACK WITH BACKOFF

Point-of-Sale attacks are back in the news. But they never really left us. In the wake of the Target attack, the FBI issued a bulletin in January warning about future incidents. They identified the malware type (RAM scrapers) and the infection vector (phish mails, and compromised websites or “watering holes”). And they even pointed out that some of the malware can be obtained on the black market.

More Phishing and Metadata Connections

At this point, we can be fairly certain that phishing was involved in the one of the largest data breaches in US history. Krebs was on the case and reported earlier this month that cyber thieves had phished a company that was doing HVAC work for Target.  Of course, this is an on-going investigation and the usual caveats apply, but it looks like an employee of a contractor received an email and…