Researchers released three reports this week detailing newly discovered point-of-sale malware programs used to capture payment card information from either e-commerce websites or in-store terminals, SC Magazine reports. Two of the three programs, GMO and DMSniff, are reported to be actively attacking POS devices, while the third, GlitchPOS, was found for sale on multiple online forums. A JavaScript sniffing tool, GMO targets online stores running on the Magento open-source content management system and e-commerce platform, while DMSniff, which went undetected for four years, affects in-store retail, the report states. GlitchPOS seems to have been developed by the creator of the popular botnet DiamondFox L!NK and was found to have opened for sale a few weeks ago.
Full Story