Virus Stealing Debit,. Credit Card Info Prowling Online Portals


NEW DELHI: Debit and credit card owners in the country have been alerted by cyber security sleuths against the damaging activities of a virus which attacks Point of Sale (POS) business counters to steal confidential data like card number and passwords.

The virus, of the deadly Trojan/Botnet family, is prowling in the domestic online media and has been identified as 'BrutPOS' by the CERT-In.

CERT-In is the nodal national agency to combat hacking, phishing and to fortify security-related defences of the Indian Internet domain. "It has been reported that malware variants targeting Point of sale (POS) systems, dubbed "BrutPOS", is spreading.

BrutPOS mainly targets windows based system by leveraging web as the main infection vector apart from being downloaded by other malware families," the latest advisory by the agency said.

The advisory added that once the system is infected with the malware, it communicates with its command and control servers to update its status and receive commands or list of IP address range to be scan for RDP servers having weak or default credentials.

Successful RDP brute force attack allows an attacker to execute another malware in the compromised system that steals payment cards data including card holders name, account no, expiration data, CVV code etc from POS systems.

READ MORE: The Most Expensive Domain Names Ever Purchased

India's Mobile Connections to Reach 815 Million This Year

Source: PTI