Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Point-of-sale malware has now infected over 1,000 companies in US

  • Please log in to reply
2 replies to this topic

#1 NickAu


    Bleepin' Fish Doctor

  • Moderator
  • 13,563 posts
  • Gender:Male
  • Location: Australia
  • Local time:05:30 PM

Posted 25 August 2014 - 04:57 PM


The malware, dubbed "Backoff" after a term used in its code, began spreading as early as October 2013 and has typically escaped notice by antivirus defenses. The US Computer Emergency Readiness Team (US-CERT), the Secret Service, and the National Cybersecurity and Communications Integration Center (NCCIC) initially published an analysis of the malware in late July, but the groups updated their advisory on Friday with the estimated business impacted.

Point-of-sale malware has now infected over 1,000 companies in US



Just a question here,  Arent most of these POS systems XP?


How safe and secure do you feel now on that nice obsolete XP system thats been "Fixed" to get POS updates.

BC AdBot (Login to Remove)


#2 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 51,766 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:30 AM

Posted 25 August 2014 - 05:18 PM

The article does not mention operating systems so it appears any OS can be attacked if the targeted software is installed.

...According to the US-CERT advisory, the group behind the Backoff malware operation scanned the Internet to find potential victims by detecting installations of the remote-desktop software frequently used by service providers to manage the point-of-sale systems of their retail clients. The attackers look for remote desktop solutions like Microsoft’s Remote Desktop, Apple's Remote Desktop, Chrome Remote Desktop, Splashtop 2, Pulseway, and LogMeIn, according to the advisory. Once a potential target is identified, the group uses the equivalent of a digital sledgehammer, attempting to break into the system using a list of common passwords....

Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 rp88


  • Members
  • 3,060 posts
  • Gender:Not Telling
  • Local time:06:30 AM

Posted 26 August 2014 - 09:20 AM

by "point of sale" this means malware pre-installed on computers and other devices or malware attacking tills,card scanners and cash registers?

Back on this site, for a while anyway, been so busy the last year.

My systems:2 laptops, intel i3 processors, windows 8.1 installed on the hard-drive and linux mint 17.3 MATE installed to USB

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users