03/02/2010 -
Threats to payment processing security do not just come in the form of credit and debit card skimming or employee theft of cardholder data - certain types of internet-facilitated malware, called crimeware, can be extremely damaging to payment processing security, said a recent report.According to IT security publication SC Magazine, crimeware - dubbed "an emerging sub-class of the more general malware" - consists of hackers directly "sniffing" payment processing data and then using it to "build more complex attacks, including silent, back-door account withdrawals or the creation of physical debit cards to perform ATM withdrawals."
The magazine notes that crimeware was the culprit of the recent RBS Worldpay and Heartland Payment Systems security breaches, which compromised 100 million payment cards in the Heartland breach and financial information from 1.5 million customers in the RBS breach.
To guard against crimeware, businesses are advised to keep their antivirus program up-to-date, ensure their systems are patched frequently and consistently, use a security plug-in for their browsers, and train employees on internet security risks.
While only some of these strategies are mandated by the PCI DSS, industry experts say that the best approach to payment processing security is using a layered approach that incorporates secuirty measures that go beyond PCI DSS requirements.

We notice you are visiting from a U.S. Internet provider. 




