Hundreds of Canadian credit cards hacked by infected terminals, firm warns

A new strain of computer malware infecting payment card terminals in restaurant and gas station has compromised nearly 700 credit cards in Canada, a computer security firm says.

The viral code, JackPOS, infects point-of-sales terminals, a security breach similar to other highly publicized recent cases that struck victims such as the Target retailing chain or the White Lodging hotel management firm.

According to a map released Monday by the California security firm IntelCrawler LLC, JackPOS stole data from 400 cards in Vancouver and from 280 other cards at a location in Longueuil, Que., south of Montreal.

IntelCrawler said the infection appeared about three weeks ago.

In an e-mail to The Globe and Mail, IntelCrawler CEO Andrew Komarov said the point-of-sales terminals were breached through remote access, by hackers who created a large list of possible passwords (such as POS1, Administrator or 123456789) and then “brute-forced” themselves into the systems.

“It provides them good results, as the security in this sector is surprisingly really very poor,” M. Komarov wrote.

Other countries affected by JackPOS include Brazil, where data for 3,000 cards in Sao Paulo were stolen; India, where 420 cards were compromised in Bangalore; and Spain, where 230 cards were pirated in Madrid.
 
Full Article
More information