{"id":6905,"date":"2014-02-02T08:51:28","date_gmt":"2014-02-02T16:51:28","guid":{"rendered":"http:\/\/www.infosecurity.pro\/?p=6905"},"modified":"2019-04-20T16:24:36","modified_gmt":"2019-04-20T16:24:36","slug":"targets-magstrip-mayhem-an-inside-job","status":"publish","type":"post","link":"https:\/\/www.infosecurity.pro\/?p=6905","title":{"rendered":"Target&#039;s Magstrip Mayhem &#8211; an inside job"},"content":{"rendered":"<p>\t\t\t\t<![CDATA[\n\n<p>A great white paper describing the Malware used against Target&nbsp;is being presented at RSA 2014 by Chester Wisniewski, Sophos Senior Security Advisor, on Wednesday, February 26, 2014 from 8 to&nbsp;9AM in West&nbsp;Room 3006 <a href=\"http:\/\/www.rsaconference.com\/events\/us14\/agenda\/sessions\/978\/buy-candy-lose-your-credit-card-investigating-pos\" target=\"_blank\" rel=\"noopener noreferrer\">-&quot;Buy Candy, Lose Your Credit Card &#8211; Investigating PoS RAM Scraping Malware&quot;<\/a><\/p>\n\n\n\n\n<p>After learning of their breach involving the loss of customer data,&nbsp;Target&nbsp;shut down&nbsp;employee and vendor&nbsp;remote access to two computing systems: an HR website called eHR and a database for suppliers called Info Retriever.&nbsp; The Wall Street Journal quoted Target&#39;s Molly Snyder as saying<\/p>\n\n\n\n\n<blockquote>\n\n\n<p><font face=\"Courier New\">We can confirm that the ongoing forensic investigation has indicated that the intruder stole a vendor&#39;s credentials which were used to access our system.<\/font><\/p>\n\n\n<\/blockquote>\n\n\n\n\n<p>The indication is strong that the malware was delivered via a compromised vendor account somewhere within the invoicing systems.&nbsp; More to follow&#8230;<\/p>\n\n\n]]>\t\t<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\t\t\t\t<![CDATA[]]>\t\t<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"amazonpipp_noncename":"","amazon-product-isactive":"","amazon-product-single-asin":"","amazon-product-content-location":"","amazon-product-content-hook-override":"","amazon-product-excerpt-hook-override":"","amazon-product-singular-only":"","amazon-product-amazon-desc":"","amazon-product-show-gallery":"","amazon-product-show-features":"","amazon-product-newwindow":"","amazon-product-show-list-price":"","amazon-product-show-used-price":"","amazon-product-show-saved-amt":"","amazon-product-timestamp":"","amazon-product-new-title":"","amazon-product-use-cartURL":"","amazon_featured_post_meta_key":"","_amazon_featured_alt":"","amazon-product-template":"","footnotes":""},"categories":[66,67],"tags":[],"class_list":["post-6905","post","type-post","status-publish","format-standard","hentry","category-breaches","category-practices"],"_links":{"self":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/6905","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6905"}],"version-history":[{"count":1,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/6905\/revisions"}],"predecessor-version":[{"id":7960,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=\/wp\/v2\/posts\/6905\/revisions\/7960"}],"wp:attachment":[{"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6905"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6905"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infosecurity.pro\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6905"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}