Research from IntelCrawler reveals electronic kiosks and ticketing systems, typically for public transport systems, are being targeted by the “d4re|dev1|” malware.

This advanced backdoor malware provides remote administration capabilities, RAM scraping and keylogging features designed to infect a ticketing network and steal payment card data.

One of the findings from the research is that ticketing terminals are sometimes being used inappropriately by staff, for example, for general web surfing, e-mail, and social network interaction.This provides multiple opportunities for either unintended or intentional infection of the ticketing terminal.

"These cases have a common denominator of weak passwords and logins, many of which were found in large 3rd party credential exposures"

Standard PCI DSS security best practice is to limit device functionality to its minimum, so browser software should be disabled or removed if not required and firewalling used to restrict web access for any POS systems unless necessary. Similarly POS file integrity monitoring should be used to maintain system integrity and detect malware activity.

Read the full article here

The Most Powerful & Reliable Cybersecurity Products

change tracker gen7r2 logo

Change Tracker Gen 7R2: Complete configuration and system integrity assurance combined with the most comprehensive and intelligent change control solution available.

FAST Cloud logo

Fast Cloud: Leverage the world’s largest whitelist repository to automatically evaluate and verify the authenticity of file changes in real-time with NNT FAST™ (File Approved-Safe Technology)

vulnerability tracker logo

Vulnerability Tracker: The world’s only limitless and unrestricted vulnerability scanning solution with unparalleled accuracy and efficiency, protecting your IT assets on premises, in the cloud and mobile endpoints.

log tracker logo

Log Tracker: Comprehensive and easy to use security information & event log management with intelligent & self-learning correlation technology to highlight potentially harmful activity in seconds

Contact Us

USA Offices

New Net Technologies LLC
4850 Tamiami Trail, Suite 301
Naples, Florida, 34103

New Net Technologies LLC
1175 Peachtree St NE
Atlanta, Georgia, 30361.

Tel: (844) 898-8358
[email protected]

 

UK Office

New Net Technologies Ltd
The Russell Building, West Common
Harpenden, Hertfordshire
AL5 2JQ

Tel: 020 3917 4995
 [email protected]

SC Magazine Cybersecurity 500 CSGEA Winners 2021 CIS benchmarking SEWP Now Certified IBM Security
Copyright 2022, New Net Technologies LLC. All rights reserved. 
NNT and Change Tracker are registered trademarks of New Net Technologies LLC.
All other product, company names and trademarks are the property of their respective owners.