Home page logo
/

basics logo Security Basics mailing list archives

EFTPOS/POS fraud
From: "Murda" <murdamcloud () bigpond com>
Date: Tue, 2 Feb 2010 10:16:21 +1000

Hi all,
There have been plenty of cases recently of modded EFTPOS machines being
used to skim card info. However, I'm wondering if there have been any cases
of attackers using a connected POS machine to harvest data from the EFTPOS
machine?

That is, have there been documented instances of vulnerable POS machines
being used to stage attacks against the EFTPOS transaction?

I don't even know if this is possible(at least not on machines which do not
store cardholder data).


Thanks



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
  • EFTPOS/POS fraud Murda (Feb 02)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]