Some of you may be tired of hearing about the latest retail hack, but trust me, it's not something that you should ignore. And the latest revelation may just blow your socks off.
So you know about the Target hack in December, and probably a few more hacks - like the UPS store - since then. But did you know that most of these hacks are caused by the same kind of malware?
Nicknamed "Backoff," the malware infiltrates companies in the same manner all over the country. Hackers look for remote entries, like a vendor who services the Point of Sale (PoS) machines, or an employee that works remotely.
Then the hackers work to break into the employee passwords, and employ Backoff. The malware slithers through the systems undetected until it gets to the PoS software.
When it reaches the PoS data, Backoff sends the personally identifiable customer information back to the hackers on the other end. And the results have been catastrophic.
On July 31, Homeland Security, along with the Secret Service, the National Cybersecurity and Communications Integration Center and their partners in the security industry, warned companies to check their in-store cash register systems for a malware package that security experts called Backoff after a word that appeared in its code. Until that point, Backoff malware and variations of it were undetectable by antivirus products.
Since then, seven companies that sell and manage in-store cash register systems have confirmed to government officials that they each had multiple clients affected, the government said Friday. Some of those clients, like UPS and Supervalu, have stepped forward, but most have not.
What does this mean for security? You're going to have to take it to the next level.