So we've looked at e-comm.
We've looked at a point of sale.
When I started in the business,
we didn't really talk about e-comm attacks and point-of-sale attacks.
We just talked about attacks, about what I call infrastructure attacks,
back-end attacks, Active Directory attacks,
attacks on payment switches.
You remember the really big payment processor in the US that had the
network-level attack where they rewrote the network driver?
Those type of, well let's call them infrastructure attacks,
do you still see those or are those old fashioned now?
They are old fashioned, but they're tried-and-true good ones.
We still see things, like basic remote access into networks,
where attackers are taking advantage of things like weak
passwords or default username/passwords on routers.
We see getting in from less secure networks,
less privileged networks,
coming in and leveraging those --- Like the world-famous heating and
ventilation control to a big-box retailer attack.
Yeah.
There was nothing new there.
They just used tried-and-true methods to get into the more secure networks.
So that's still really common.
When I was doing this full time in the card brands,
the worst thing about infrastructure attacks was,
A.
how they got in, B.
just total lack of segmentation on people's networks.
Yeah.
We've recently done a case where the merchant had all of their stores
on one giant flat network so all the stores could talk to each other
with no segmentation between the stores.
And so when one store got hit with a ransomware attack,
within three days, hundreds of other stores had the same attack hit it.
And they didn't have to go out to each, single store.
They just hit one store, and they're like,
wow, we can see all the other stores from here.
And they had just pivoted from the one store.
We are in 2018s now, still, yeah?
Because 10 years ago, I could have believed that was a thing.
I can't really believe that's still a thing.
It still happens, and it can still be a devastating attack.
So, the way in is typically remote access?
Remote access or through all the different modules that plug into a network.
All kinds of HIPPA compliance issues come into play.
GDPR issues are now a thing.
But, back to shopping carts, shopping carts usually come with a web admin portal,
and a lot of times,
people forget that those need two-factor authentication or
multi-factor authentication as well.
And they can get right in,
and they can wreak all kinds of havoc on the back end of
the shopping cart through a web portal.
Same as concept management systems.
Any concept management system has got a web interface that your
marketing team probably has the admin password for.
And believe me, marketing teams are not usually great at security.
Great at marketing, which is why they're in the marketing team,
not always brilliant at security.
And I've seen a lot of attacks that went in through the
content management system in the same way.
Yeah, we recently saw one where they got in through the DVI network,
the security cameras.
No.
They had all these security cameras set up to
monitor the point-of-sale terminals,
and they were matching photos of the customers with the
receipt and storing it all in a database.
Then they had a web portal so the owners of the company
could go in and see their different stores and watch for
employees stealing doughnuts.
But the attackers were able to get in through that DVI network and
because the DVI network was talking to the POS system so they could
match the receipt with the pictures,
they were able to get in through that channel and steal credit cards.
And then you,
and they also had the picture of the person's credit card they stole.
That's neat.