FBI Raids Chinese Point-of-Sale Giant PAX Technology

guest · Oct 26, 2021

FBI Raids Chinese Point-of-Sale Giant PAX Technology
October 26, 2021
https://krebsonsecurity.com/2021/10/fbi-raids-chinese-point-of-sale-giant-pax-technology/

U.S. federal investigators today raided the Florida offices of PAX Technology, a Chinese provider of point-of-sale devices used by millions of businesses and retailers globally. KrebsOnSecurity has learned the raid is tied to reports that PAX’s systems may have been involved in cyberattacks on U.S. and E.U. organizations.

Headquartered in Shenzhen, China, PAX Technology Inc. has more than 60 million point-of-sale terminals in use throughout 120 countries. Earlier today, Jacksonville, Fla. based WOKV.com reported that agents with the FBI and Department of Homeland Security (DHS) had raided a local PAX Technology warehouse.
Click to expand...

According to that source, the payment processor found that the PAX terminals were being used both as a malware “dropper” — a repository for malicious files — and as “command-and-control” locations for staging attacks and collecting information.

“FBI and MI5 are conducting an intensive investigation into PAX,” the source said. “A major US payment processor began asking questions about network packets originating from PAX terminals and were not given any good answers.”
The source said two major financial providers — one in the United States and one in the United Kingdom — had already begun pulling PAX terminals from their payment infrastructure, a claim that was verified by two different sources.
Click to expand...

“My sources say that there is tech proof of the way that the terminals were used in attack ops,” the source said.
The source was unable to share specific details about the strange network activity that prompted the FBI’s investigation.

It is not uncommon for payment terminals to be compromised remotely by malicious software and made to collect and transmit stolen information. Indeed, some of history’s largest cyberheists involved point-of-sale malware, including the 2008 breach at Heartland Payment Systems that exposed 100 million payment cards, and the 2013-2014 string of breaches at Target, Home Depot and elsewhere that led to the theft of roughly another 100 million cards.
Click to expand...

Floyd 57 · Oct 27, 2021

If in doubt, DO NOT trust chinese stuff! Unless it's from aliexpress xD

Log in or Sign up

FBI Raids Chinese Point-of-Sale Giant PAX Technology

guest Guest

Floyd 57 Registered Member

Log in or Sign up

FBI Raids Chinese Point-of-Sale Giant PAX Technology

guest Guest

Floyd 57 Registered Member

Useful Searches