article thumbnail

Hidden Cobra APT used the new ATM cash-out scheme FASTCash to hit banks worldwide

Security Affairs

The activity of the Lazarus Group surged in 2014 and 2015, its members used mostly custom-tailored malware in their attacks and experts that investigated on the crew consider it highly sophisticated. “HIDDEN COBRA actors most likely deployed ISO 8583 libraries on the targeted switch application servers. ” states the report.

Retail 98
article thumbnail

Oracle critical patch advisory addresses 284 flaws, 33 critical

Security Affairs

The Commons FileUpload library is the default file upload mechanism in Struts 2, the CVE-2016-1000031 was discovered two years ago by experts at Tenable. The flaw also affected the Financial Services Analytical Applications Infrastructure, the Fusion Middleware MapViewer, and four three Oracle Retail components. Pierluigi Paganini.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Nodersok malware delivery campaign relies on advanced techniques

Security Affairs

About 3% of the infected systems belong to organizations in different sectors, including education, professional services, healthcare, finance, and retail. One of the second-stage instances of PowerShell downloads the legitimate node.exe tool, while another drops WinDivert packet capture library components. Pierluigi Paganini.

article thumbnail

U.S. Bookstore giant Barnes & Noble hit by cyberattack

Security Affairs

is an American bookseller with the largest number of retail outlets in the United States in fifty states. Over the weekend, users have been complaining on Nook’s Facebook page and Twitter that they were not able to access their library of purchased eBooks and magazine subscriptions. Barnes & Noble, Inc. , Pierluigi Paganini.

article thumbnail

FIN6 recently expanded operations to target eCommerce sites

Security Affairs

FIN6 group has been active since 2015, past attacks were focused on point-of-sale (POS) machines used by retailers and companies in the hospitality sector in the U.S. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->.

Retail 92
article thumbnail

ATMitch: New Evidence Spotted In The Wild

Security Affairs

In fact, the “ fwmain32 ” process is part of the software services produced by Wincor Nixdorf International GmbH, one of the major vendors providing retail and banking hardware such as ATMs. Figure 5: “msxfs.dll”, library required by malware to communicate with ATM device. Figure 2: Research of “fwmain32.exe” exe” process by malware.

article thumbnail

Security Ledger Podcast: Security Automation Is (And Isn't) The Future Of InfoSec

ForAllSecure

Machine learning algorithms are already being used in transportation to ease road congestion, in healthcare to spot medical errors and improve patient care and in retail to improve the customer shopping experience. If we use an XML library, just using the current version of that library isn't enough. I think that's a good start.