How the leak of employee passwords led to the hacking of 140,000 credit card payment terminals – Times of India

image used for representation

Hackers have reportedly stolen thousands of passwords to gain access to a dashboard used to remotely manage and control thousands of credit card payment terminals built by digital payments major Wiseasy. report in techcrunch quotes a cyber security startup, bugard, based in singapore Vissi is an Android-based payment terminal used by hotels, restaurants and retail outlets Asia Pacific region.
“Vicey enables banks, acquirers, fintech companies, telecom operators and industry solution providers to provide diverse financial services to the wider public in more cost-efficient and convenient ways,” the company said on its website.
How hackers gained access
The hackers were able to gain access to Wiseasy’s systems through employees’ computer passwords that were apparently being stolen by malware. Yusuf MohammedBuGuard’s chief technology officer told TechCrunch that the Wiseasy employee passwords used to access Wiseasy’s cloud dashboard – including the ‘admin’ account – were found on dark web marketplaces actively used by cybercriminals. Had gone.
He said two cloud dashboards had been exposed, and claimed that none even had basic security features, such as two-factor authentication. This allowed hackers to easily break into the company’s payment terminals around the world. Wiseasy claims to have offices in 114 locations around the world.
The Bugard CTO claimed on the website that he attempted to inform Vissi about the compromised dashboard in early July. However, efforts to disclose the agreement were met with meetings with officials which were later canceled without prior notice. He further claimed that the company declined to say whether the cloud dashboards would be secure or not.

Follow us on Social Media

FacebookTwitterinstagramKu APPyoutube