Oracle data breach opened credit card payment systems to attack

Data thieves don’t always have to go straight to the source to swipe payment details… sometimes, they can take a roundabout route. Oracle has confirmed to security guru Brian Krebs that hackers breached a support portal for Micros, the point-of-sale credit card payment system it acquired in 2014. It’s not certain just how many systems were breached (Krebs’ sources say over 700), but the intruders had slipped malware on to the portal that would let them grab logins for the companies using Micros. They wouldn’t have had direct access to payment data, but there’s a chance those account details could be used to slip malware into the credit card systems and then grab sensitive info.

Oracle is quick to stress that it has “addressed” the rogue code, and that its other services weren’t affected. The payment details themselves are encrypted both in the database and when in use, too, so attackers couldn’t easily make use of it. However, there are hints that a well-known Russian criminal group, the Carbanak Gang, may have been involved — the hackers likely knew what they could get. And when Micros’ users include heavyweights like Adidas, Burger King and Hilton, there’s a worry that the culprits got the keys to someone’s kingdom.

Source: Krebs on Security

Source: Engadget - Read the full article here

Author: Daily Tech Whip

This article is part of our 'News Tiles' service. The site is currently in Beta. When it is fully operational you will be able to search through and arrange the 'Tiles' to display a keyword, product or technology over your chosen time period. For example you would be able to display all of the leading tech articles on the new Kindle Fire, in one spot in real time. You will also have access to our own original reporting and analysis as well as a polished place to post your own thoughts & reviews here, amongst the Daily Tech Whip Community. Please let us know if you have any feedback via the contact form or via Twitter. Don't forget to come back next week and see our full site and claim your name and your own free tech blog.

Share This Post On