article thumbnail

Russians Shut Down Huge Card Fraud Ring

Krebs on Security

Cybersecurity experts say the raid included the charging of a major carding kingpin thought to be tied to dozens of carding shops and to some of the bigger data breaches targeting western retailers over the past decade. authorities in 2017.

Retail 278
article thumbnail

Breach at Cloud Solution Provider PCM Inc.

Krebs on Security

One security expert at a PCM customer who was recently notified about the incident said the intruders appeared primarily interested in stealing information that could be used to conduct gift card fraud at various retailers and financial institutions. earlier this year. .” Insight has not yet responded to requests for comment.

Cloud 246
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

TA544 group behind a spike in Ursnif malware campaigns targeting Italy

Security Affairs

TA544 is a financially motivated threat actor that is active at least since 2017, it focuses on attacks on banking users, it leverages banking malware and other payloads to target organizations worldwide, mainly in Italy and Japan. ” reads the analysis published by Proofpoint. Banca Sella UniCredit Group.

Retail 83
article thumbnail

IBM X-Force Exchange Threat Intelligence Platform

eSecurity Planet

Markets and Use Cases In 2015, when IBM launched the X-Force Exchange it noted that six of the world’s top 10 retailers and five of the world’s top 10 banks were part of the 1,000+ organizations contributing to the X-Force Exchange threat database. Agents X-Force Exchange is a cloud-based platform, and does not deploy via agents.

Retail 86
article thumbnail

Russian TA505 threat actor target financial entities worldwide

Security Affairs

“CyberInt researchers have been tracking various activities following the spear-phishing campaign targeting large US-based retailers detected in December 2018.” ” reads the analysis published by Cyberint. ” continues the analysis published by Cyberint.

Retail 70
article thumbnail

FIN8 Hacking Group is back with an improved version of the ShellTea Backdoor

Security Affairs

The last time security experts documented the FIN8’s activities was in 2016 and 2017. At the time, FireEye and root9B published detailed reports about a series of attacks targeting the retail sector. FireEye documented obfuscation techniques used by the group in June 2017 and the involvement of PUNCHTRACK POS-scraping malware.

article thumbnail

Wawa Breach May Have Compromised More Than 30 Million Payment Cards

Krebs on Security

“Based on Gemini’s analysis, the initial set of bases linked to “BIGBADABOOM-III” consisted of nearly 100,000 records,” Gemini observed. Most card breaches at restaurants and other brick-and-mortar stores occur when cybercriminals manage to remotely install malicious software on the retailer’s card-processing systems.

Sales 306