pos malware: is your debit/credit transcations secure?

POS Malware: Is your Credit/Debit Card Transaction Secure? Amit Malik Member @ Cysinfo Researcher @ Netskope

Upload: cysinfo-cyber-security-community

Post on 22-Jan-2017

155 views

Category:

Technology

4 download

Report

Download

Embed Size (px):

TRANSCRIPT

Page 1: POS Malware: Is your Debit/Credit Transcations Secure?

POS Malware: Is your Credit/Debit Card

Transaction Secure?Amit Malik

Member @ Cysinfo Researcher @ Netskope

Page 2: POS Malware: Is your Debit/Credit Transcations Secure?

Agenda• POS Terminal

• Understanding Credit Card transaction ecosystem

• POS malware - Introduction

• POS Malware Evolution

• POS Infection Vectors

• Case study

• BlackPOS

• New Technologies (EMV/NFC/RFAID)

Page 3: POS Malware: Is your Debit/Credit Transcations Secure?

POS Terminal• Wikipedia: ht tps:/ /en.wikipedia.org/wiki /

Point_of_sale

• POS terminals are combination of software and hardware that allows the retail locations to accept credit card.

https://en.wikipedia.org/wiki/Point_of_sale

Page 4: POS Malware: Is your Debit/Credit Transcations Secure?

Credit Card Transaction Ecosystem

http://www.pathwaypayments.com/processing-diagram.html

Page 5: POS Malware: Is your Debit/Credit Transcations Secure?

Inside Credit Card• Magnetic Strip of the card has three data tracks

-1,2 and 3. Only Track -1, 2 are used by cards.

• Track 1 was created by IATA (International Airport Transpor t Associat ion) and contains 79 alphanumeric characters.

• Track 2 was created by American Bankers Association and contains 40 numeric characters.

• https://en.wikipedia.org/wiki/Magnetic_stripe_card

https://en.wikipedia.org/wiki/Magnetic_stripe_card

Page 6: POS Malware: Is your Debit/Credit Transcations Secure?

Inside Credit Card Cont.

• Checksum is calculated using Luhn algorithm (https://en.wikipedia.org/wiki/Luhn_algorithm).

• https://en.wikipedia.org/wiki/Payment_card_number

https://en.wikipedia.org/wiki/Luhn_algorithm

https://en.wikipedia.org/wiki/Payment_card_number

Page 7: POS Malware: Is your Debit/Credit Transcations Secure?

POS Malware: Introduction• Early data breaches used network sniffing to

capture the card data while in transit. But this became obsolete because of end to end encryption on the wire.

• POS terminals read the card data. The card data can be found in clear text for a very small amount of time in the POS RAM.

• POS malware scrap the RAM to collect the card data.

Page 8: POS Malware: Is your Debit/Credit Transcations Secure?

POS Malware Data Breaches

20122013

20142015

2016

subwayTarget

& The Home Depot

SchnucksNEXTEP

& Hilton

MICROS

Page 9: POS Malware: Is your Debit/Credit Transcations Secure?

POS Malware Data Breaches In Numbers

150

300

450

600

2013 2014 2015

*Data from Verizon Reports

Page 10: POS Malware: Is your Debit/Credit Transcations Secure?

POS Malware Incidents per Industry

100

Accomodation

Entertainment

Healthcare

Retail

Other Services

2013 2014 2015

*Data from Verizon Reports

Page 11: POS Malware: Is your Debit/Credit Transcations Secure?

POS malware Evolution

20112012

20132014

2015

Rdasrv VmSkimmer, Chewbacca

BlackPOS, Alina, Dexter

Decebal, JackPOS, Soraya, Backoff, BrutPOS,

BlackPOS v2

POSeidon, LogPOS, pwnPOS,

FighterPOS

Page 12: POS Malware: Is your Debit/Credit Transcations Secure?

POS Infection Methods• Stolen Credentials

• Social engineering

• Phishing Campaign

• Insiders

• Software vulnerability

Page 13: POS Malware: Is your Debit/Credit Transcations Secure?

Case Study - BlackPOS• Demo (Conceptual) - Memory scrapping using

Pymal

• Sample Analysis - BlackPOS.

Page 14: POS Malware: Is your Debit/Credit Transcations Secure?

New Technologies• EMV - ‘Chip and PIN’, The chip on the card now

stores the encrypted card data. It makes the counterfeit difficult but not immune to POS malware.

• New methods like Apple pay or contactless payment methods are not vulnerable to this threat but they open the new possibilities and change in threat landscape.

Page 15: POS Malware: Is your Debit/Credit Transcations Secure?

Thank You!

BAB II. TINJAUAN PUSTAKA 2.1 Siklus Hidrologidigilib.unila.ac.id/7541/16/BAB II.pdf · ekstrim yaitu debit maksimum (banjir) atau debit minimum (debit-debit ... Berdasarkan pengertian

RS2 Software p.l.c. COMPANY ANNOUNCEMENTIngenico/BS PAYONE Debit/Direct Debtit Card transactions in EUR billions Debit Direct Debit The German debit card acquiring market comprises

ANALISIS KOEFISIEN DEBIT PADA VARIASI ALAT UKUR DEBIT DI

Multi Level Robust Data Security Systemnearly 3.2 million debit cards in 2016, was caused by a malware injection. While the debit card data was compromised between 21 May and 11 July

Improving accuracy of malware detection by …...FFRI, Inc. Background – malware and its detection 4 Increasing malware Targeted Attack (Unknown malware) Malware generators Obfuscators

THE EVOLUTION OF MALWARE & FUTURE MALWARE MITIGATION

DEBIT AIR LIMBAH - Indradi Wijatmikoindradi.lecture.ub.ac.id/files/2014/02/12-Debit-air-buangan.pdf · L = panjang pipa (m) qinf = debit infiltrasi (liter/detik/km) Qmin = debit minimum

Intrusion Detection and Malware Analysis - Malware collection

SEPA Direct Debit Implementation Guide - Danske Bank · SEPA DIRECT DEBIT IMPLEMENTATION GUIDE October 2014 . DANSKE BANK SEPA DIRECT DEBIT IMPLEMENTATION GUIDE . SEPA Direct Debit

Malware Analysis Without Looking At Assembly Codegauss.ececs.uc.edu/Courses/c5155/pdf/malware-analysis.pdf · 2015. 11. 20. · Malware Analysis Malware typically employs encryption:

ANALISA STATISTIK DEBIT BANJIR DAN DEBIT ANDALAN

h30 Debit Fixe Debit Variable Debit Module by Nialcop

Maha RuPay Debit Card - Mahanagar Bank Debit Card … · Know your Maha RuPay Debit Card Front Side 1. Debit Card number:- This is 16 digit exclusive Debit Card number. It is used

Reversing malware analysis trainingpart9 advanced malware analysis

Malware, Malware y más Malware ¿Cómo me puedo proteger? “Dijo el cliente web”

1 Automated malware audit service Automatischer Malware Audit

Introduction to Mobile Malware. Outline ➢ Introduction ➢ Types of Malware ➢ Malware examples ➢ How Malware Spreads ➢ Prevention ➢ AndroRAT Hands-on Lab

Malware Analysis and Antivirus Technologies: Kernel Malware & A Look at Malware … · 2011-08-16 · Malware Analysis and Antivirus Technologies: Kernel Malware & A Look at Malware

Malware Analysis Analysis.pdf · Definisi Malware Analysis • What is a malware? • Malware (malicious software) ... Malware Sinkronisasi Token • Pelaku: Zeus Banking Trojan •

Analisis dan Deteksi Malware Menggunakan Metode Malware

00 harri fm new - Pearson · Debit Credit Liability..... Credit Debit Shareholders’ equity ..... Credit Debit Revenue ..... Credit Debit Expense ..... Debit Credit II. The accountant

Computer Virology and Mobile Malware Detection · 2019-03-14 · Outline •Introduction •Computer Virology • Malware taxonomy • Encrypted malware •Malware Detection •Mobile

Malware and anti-malware (fun with Trojans) - Z. …z.cliffe.schreuders.org/edu/FS/Malware and anti-malware... · 2014-04-02 · Malware and anti-malware (fun with Trojans) ... with

MALWARES MALWARE REVIEWED ISE DE Malware Reviewed · MALWARES There are public reports about spreading of malware named as ServHelper malware. It is a backdoor malware used by attacker

ISO 20022 Credit and Debit Notification SEPA Direct Debit · ISO 20022 Credit and Debit Notification SEPA Direct Debit ... ISO 20022 Credit and Debit Notification SDD camt.054.001.02

Malware and Anti-Malware Seminar by Benny Czarny

CYBER THREAT INTELLIGENCE - Happiest Minds · Customer mentions on Social Media, Underground Forum and auction of credit/debit card ,PI data, Company data targeted malware attacks

Mobile Malware Network View - Black Hat · Mobile Malware Network View ... ... Windows Malware impacts mobile

Chapter 8 Malware - FTMS · – Boot virus – Logic Bomb virus – Directory virus – Resident virus. CSCA0101 Computing Basics 8 Malware Types of Malware ... Malware Types of Malware

WP Security Packages Presentation 2012 Peggy Jackson …...malware • 29% involve ... debit, credit, EBT and value-added transactions ... and support you need to secure your point

Malware & Anti-Malware

Android Malware Exposed-Evolution of Android Malware

Westpac Debit Mastercard & Westpac Airpoints Debit ... · Debit Mastercard & Airpoints Debit Mastercard 7 – Other transactions authorised by you or another cardholder on your account

IEEE TRANSCATIONS ON INDUSTRY APPLICATIONS Design

Malware Fails Best Bugs in Malware Felix Leder [Malware ... · 1 Malware Fails Best Bugs in Malware Felix Leder [Malware Detection Team] [email protected] 5. desember 2011 malware