Teen identified as malware author after Target hack - KPLC 7 News, Lake Charles, Louisiana

Teen identified as malware author after Target, Neiman Marcus hacked

(Image source: CNN / Target) (Image source: CNN / Target)

By Marie-Louise Gumuchian, CNN

(CNN) -- A security firm has identified a teenager in Russia as the author of the malware used in the cyberattacks against Target and Neiman Marcus, and warned retailers to be prepared for more potential breaches.

Investigators have been probing the recent holiday season cyberattack where a massive breach at Target compromised credit card numbers and other personal information of 70 million customers.

In a statement published Friday, Security firm IntelCrawler said the breach was the result of malware that infected Target's system and possibly compromised the systems of other retailers. Neiman Marcus reported a similar security breach this month.

The malware, which IntelCrawler describes as an "off-the-shelf" product known as BlackPOS, was allegedly written by a 17-year-old with roots in St. Petersburg.

New breaches?

Experts say the teenager who made the malware shared it with others.

"Well, we should be worried. One of the things the hackers do is take the malware as it's called. Once it's identified, then the security community can rally around it and put controls in place. But the problem is, the hackers know that. And they manipulate or mutate this malware, and then reuse it," SecureState CEO Ken Stasiak said.

"We believe that he originated the code, or the malware everybody's calling it now. And was able to put it up on the Internet for download for other hackers to then take, and potentially use it for malicious harm. And that's what we believe happened to Target and Neiman Marcus."

The first sample of the malware was created in March and since then, more than 40 versions have been sold around the world, IntelCrawler said. It first infected retailers in Australia, Canada and the United States.

Andrew Komarov, IntelCrawler CEO, said most of the victims are department stores and said more BlackPOS infections as well as new breaches could appear soon. Retailers should be prepared.

"The numbers could be staggering, really, because what the retailers are looking at are potential class action lawsuits," CNN legal analyst Paul Callan said.

"Let's say hypothetically, a retailer has 40 million transactions by 40 million different customers. All 40 million may have been damaged in some way, and under law they can all be joined together in a class action lawsuit."

CNN's George Howell contributed to this report.

The-CNN-Wire
™ & © 2014 Cable News Network, Inc., a Time Warner Company. All rights reserved.

  • More Local NewsNewsMore>>

  • Hiring Our Heroes: Military Hiring Fair

    Hiring Our Heroes: Military Hiring Fair

    Wednesday, March 22 2017 6:25 PM EDT2017-03-22 22:25:04 GMT
    (Source: website)(Source: website)

    Veteran job seekers, active duty military members, Guard and Reserve members, and military spouses are invited to a one-of-a-kind career fair in Lake Charles. The "Hiring Our Heroes" job fair will be held from 10:30 a.m. to 1:30 p.m., Wednesday, March 22, at the Lake Charles Civic Center Exhibition Hall.  HR and workforce professionals will also lead a workshop at 8:30 a.m. Topics will include resume building, networking, interview tips and resume engine.  To re...

    More >>

    Veteran job seekers, active duty military members, Guard and Reserve members, and military spouses are invited to a one-of-a-kind career fair in Lake Charles. The "Hiring Our Heroes" job fair will be held from 10:30 a.m. to 1:30 p.m., Wednesday, March 22, at the Lake Charles Civic Center Exhibition Hall.  HR and workforce professionals will also lead a workshop at 8:30 a.m. Topics will include resume building, networking, interview tips and resume engine.  To re...

    More >>
  • BREAKING

    Lyft arrives in Lake Charles on Thursday

    Lyft arrives in Lake Charles on Thursday

    Wednesday, March 22 2017 5:01 PM EDT2017-03-22 21:01:22 GMT
    (Source: Lyft)(Source: Lyft)

    The ride-booking company, Lyft, is launching in 25 U.S. cities on Thursday - and Lake Charles is one of them.

    More >>

    The ride-booking company, Lyft, is launching in 25 U.S. cities on Thursday - and Lake Charles is one of them.

    More >>
  • BREAKING

    Police: Woman arrested in Lake Charles bank robbery confesses to bank robbery in Orange, TX

    Police: Woman arrested in Lake Charles bank robbery confesses to bank robbery in Orange, TX

    Wednesday, March 22 2017 4:41 PM EDT2017-03-22 20:41:42 GMT
    (Source: Calcasieu Parish Sheriff's Office(Source: Calcasieu Parish Sheriff's Office
    A Vidor, TX, woman accused of robbing a bank in Lake Charles has confessed to doing the same in Orange, TX, authorities say. When the Capitol One bank on N. 16th Street in Orange was robbed by a lone female, the Orange Police Department and the FBI conducted an investigation but no suspect was identified, according to a news release from the Orange Police Department. However, after Eva Renee Powell, 50, was arrested in Lake Charles Saturday, she was questioned again by the...More >>
    A Vidor, TX, woman accused of robbing a bank in Lake Charles has confessed to doing the same in Orange, TX, authorities say. When the Capitol One bank on N. 16th Street in Orange was robbed by a lone female, the Orange Police Department and the FBI conducted an investigation but no suspect was identified, according to a news release from the Orange Police Department. However, after Eva Renee Powell, 50, was arrested in Lake Charles Saturday, she was questioned again by the...More >>
Powered by Frankly