Oracle-owned point-of-sale service suffers from malware attack
MICROS, an Oracle-owned division that’s one of the world’s top three point-of-sale services, has suffered a security breach. The attack possibly comes at the hands of a Russian crime gang that siphoned out more than $1 billion (~£770 million) from banks and retailers in past hacks, security news site KrebsOnSecurity reported Monday.
Oracle representatives have told reporter Brian Krebs that company engineers “detected and addressed malicious code in certain legacy MICROS systems” and that the service has asked all customers to reset their passwords for the MICROS online support site. Anonymous people have told Krebs that Oracle engineers initially thought the breach was limited to a small number of computers in the company’s retail division. The engineers later realized the infection affected more than 700 systems.
Krebs went on to report that two security experts briefed on the breach investigation said the MICROS support portal was seen communicating with a server that’s known to be used by the Carbanak Gang. Over the past few years, Carbanak members are suspected of funneling more than $1 billion out of banks, retailers, and hospitality firms the group hacked into.