Evil Dexter lurks in card reader, ready to SLASH UP your credit score

Cybercrooks have created an improved version of the Dexter point-of-sale malware that's being blamed for slurping the credit and debit card details of holiday shoppers. A new version of Dexter, first discovered by security researchers Seculert about a year ago, has been planted on 31 infected point-of-sale terminals, located …

[tojb]

The only secure bank account is an empty one, with no overdraft facility.

[VinceH]

"The only secure bank account is an empty one, with no overdraft facility."

Only if you can be absolutely certain the bank will not honour a payment and put the account into a (more expensive) unauthorised overdraft.

[Peter Gathercole]

Anybody know...

...whether the PoS tills run an embedded version of Windows, or one of the full-fat versions?

Just curious.

[Tromos]

PoS

Aptly named.

[Steve Davies 3]

Cash rules

Ok.

No tracking,

No 'you shopped at Subway. Perhaps you want this bag of dope?' adverts

[Amorous Cowherder]

"..a few theories about how the Windows-based malware is spreading."

I no longer think POS stands for Point-Of-Sale, but Piece-Of.....

[Victor Ludorum]

I have an idea...

I was troubleshooting some VPN issues a while ago, and when I reviewed the logs I noticed that there had been some access that looked like attempts to log in to a certain 'enterprise point of sale' system. Could this be related? Some retail systems might be set up for remote access with quite lax security?

V.

[hplasm]

'Windows-based malware'

This common phrase is due for it's own icon.

[Identity]

Possible source of contamination

"Hey, minimum-wage drudge, how'd you like to make a $1,000 just to slip this thumb drive in when no one's looking?"

[codeusirae]

Data is sent via FTP?

"Data is sent via FTP to hosts based in Russia"

Why is a POS system even able to FTP back to a server in Russia?