Sleuths detect virus at card swipe terminals

The virus named “Dexter, black POS, memory dump and grabber” can acquire seven aliases when infecting a system and once it is successful in breaching the security protocols of a POS terminal, it steals confidential data like card holder’s name, account number, expiration date, CVV code and other discretionary information which could lead to financially compromising and phishing attacks on the card at a later stage.

“It has been reported that malware campaigns targeting payment card processing, point-of-sale (POS), check out systems or equipment are on the rise. The common infection vectors for POS system malwares includes phishing emails or social engineering techniques to deliver the malware, use of default or weak credentials, unauthorised access, open wireless networks along with the methods of installing malware as a part of service,” a latest advisory issued to the public by the Computer Emergency Response Team (CERT-India) said. CERT-In is the nodal department to protect Indian cyberspace and software infrastructure against destructive and hacking activities.