Η company payment management By VISA he mentioned that North American businesses are facing attacks from hackers. Specifically, vulnerable companies operate gas stations and gas pumps. The target of hackers is development of POS malware in corporate networks.
According to By VISA, have at least been discovered and investigated lately five such incidents.
The main target of the hackers was acquisition access in networks fuel distributors, installing POS malware.
POS malware works as follows: it searches the computer's RAM for unencrypted payment card data. Subsequently, collect them data and downloads them to a remote server.
The VISA Payment Disruption (PFD) team said that the hacking teams found a weak point in the operation of gas stations and gas-operated businesses, and took advantage of it.
While some POS terminals support chip-and-PIN transactions, most "card readers" that are installed in gas pump companies do not.
These devices still work with older technology, which reads payment data only from the magnetic strip of cards.
The data from these outdated Appliances are sent to the gas station's main network unencrypted. Hackers knew this and thus infringed on business networks.
The November, VISA revealed violations in two businesses and three in December. These revelations indicate that the criminal groups in the cyberspace have found a new purpose and way attack.
According to VISA, the attacks on fuel companies started in summer. Two of the five attacks were linked to a known hacking team, the FIN8.
VISA mentioned that there are some easy ways to protect them customers, which could be followed by fuel distributors: 1) encryption of card data and 2) use POS terminal that supports chip-and-PIN transactions.
The second security practice can significantly reduce the chance of such attacks.
By October of 2020, all this businesses are required to change POS terminals to support such transactions. Until then, however, they are still vulnerable to attacks.