FIN8 Targets Card Data at Fuel Pumps

guest · Dec 13, 2019

FIN8 Targets Card Data at Fuel Pumps
Paying at the pump has landed in the sights of the notorious PoS-skimming group
December 13, 2019
https://threatpost.com/fin8-targets-card-data-fuel-pumps/151105/

The notorious FIN8 cybercrime group has a new target when it comes to skimming payment-card details from consumers: Point-of-sale (PoS) systems used at fuel pumps at gas stations.

Visa warned this week in a public alert posted online that its Payment Fraud Disruption (PFD) department has seen at least two separate campaigns emerging this past summer that targeted fuel pumps.

“PFD recently reported on the observed increase of PoS attacks against fuel dispenser merchants, and it is likely these merchants are an increasingly attractive target for cybercrime groups,” according to the Visa alert.
Even before Visa’s warning of increased attacks, there has been evidence of the rise of fuel pumps as targets for cybercriminals. Since their inception, these systems have proven to be a rather easy target for threat actors due to their inherent lack of security, with a ramp up of attacks that started early last year.

In fact, in both of the two recent pump incidents, researchers observed security flaws on the part of the merchants that put payment-card data at risk, including lack of secure acceptance technology – such as EMV chip, point-to-point encryption or tokenization – and non-compliance with PCI DSS, according to the alert.
Click to expand...

Log in or Sign up

FIN8 Targets Card Data at Fuel Pumps

guest Guest

Log in or Sign up

FIN8 Targets Card Data at Fuel Pumps

guest Guest

Useful Searches