FBI: More Target-Style Hacks on Way
20 other cases used similar malware in past year
By Arden Dier, Newser Staff
Posted Jan 24, 2014 5:00 AM CST
This Dec. 19, 2013, file photo, shows a Target retail store in Watertown, Mass.   (AP Photo/Steven Senne, File)

(Newser) – A warning to shoppers: More cyber attacks like this one and this one are coming, according to a three-page confidential FBI report seen by Reuters, a determination the FBI made after finding some 20 hacking cases in the last year used the same type of malware as in the Target breach. Specifically, it's "memory-parsing" software known as a "RAM scraper," and it steals the transaction data from a credit or debit card's magnetic strip during the brief moment during the transaction process that the info isn't encrypted.

While the software itself isn't new, it's been beefed up to avoid detection by anti-virus software, and it's being sold in underground forums for relatively cheap—about $6,000 in one case—which makes the crime "attractive to a wide range of actors," reads the Jan. 17 report. A cyber security expert tells NPR that magnetic strip cards are "totally unprotected" and "about the worst security that you can put into a payment system." While chip-enabled cards are far more secure—with data hidden behind encryption—Visa says it had only issued about 3.5 million chip cards as of mid-last year; the majority of users probably won't have them in their hands until next year. Upgrading merchant terminals and ATMs will take even longer.

View 1 more image
More From Newser
My Take on This Story
To report an error on this story,
notify our editors.
FBI: More Target-Style Hacks on Way is...
7%
5%
8%
2%
73%
5%
Show results without voting
You Might Like
Comments
Showing 3 of 4 comments
TwoSheds
Jan 26, 2014 5:10 AM CST
They had better change the script then. If you call to cancel your credit card, the operators are trained to tell you the Target rip-off was an isolated incident.
Outrageous
Jan 24, 2014 8:32 AM CST
That's it, I'm switching back to cash.
$28919642
Jan 24, 2014 6:46 AM CST
And you can just bet that Big Business will not step up to the plate to stop this, until the Feds force them to.