According to Reuters, Target's credit and debit card data was stolen using RAM scraper.
I warned of the danger of RAM scrapers in my previous posts, and I dedicate a lot of attention to memory scraping in my forthcoming book about credit card fraud and payment application security - Hacking Point of Sale.
Today, memory scraping is most effective way to steal sensitive cardholder information from point of sale machines, which works perfectly even if the software is PA-DSS validated and the merchant is PCI DSS compliant.
I warned of the danger of RAM scrapers in my previous posts, and I dedicate a lot of attention to memory scraping in my forthcoming book about credit card fraud and payment application security - Hacking Point of Sale.
Today, memory scraping is most effective way to steal sensitive cardholder information from point of sale machines, which works perfectly even if the software is PA-DSS validated and the merchant is PCI DSS compliant.
RSS Feed
