POS Hackers Sentenced for Multi-Million Dollar Payment Card Data Theft

Two Romanian nationals have plead guilty for participating in an international, multimillion-dollar scheme to remotely hack into and steal payment card data from hundreds of U.S. merchants’ computers, including a great number of Subway restaurants. Federal prosecutors noted that the conspiracies involved more than 146,000 compromised cards and more than $10 million in losses.

Iulian Dolan and Cezar Butu agreed to serve seven year and 21 month prison sentences respectively. Dolan, 28, of Craiova, Romania, pleaded guilty to one count of conspiracy to commit computer fraud and two counts of conspiracy to commit access device fraud, while Butu, 27, of Ploiesti, Romania, pleaded guilty to one count of conspiracy to commit access device fraud. A third co-conspirator, Adrian-Tiberiu Oprea, is currently awaiting trial in New Hampshire. The defendants admitted in their guilty pleas, that during a period roughly from in or about 2009-2011, they participated in Romanian-based conspiracies, to hack into hundreds of U.S.-based computers to steal credit, debit and payment account numbers and associated data. They then used the stolen payment card data to make unauthorized charges on, and/or transfers of funds from, those accounts (or alternatively to transfer the stolen payment card data to other co-conspirators who would do the same).       

The official judgment is a warning signal to all operators concerning POS security and describes how the hackers carried out the scheme. According to the official judgement, Dolan admitted that he, along with Oprea, remotely hacked into U.S. merchants’ point of sale (POS) where customers’ payment card data was electronically stored.

“Specifically, Dolan first remotely scanned the internet to identify U.S.-based vulnerable POS systems with certain remote desktop software applications (RDAs) installed on them. Using these RDAs, Dolan logged onto the targeted POS systems over the internet. These were typically password-protected, so Dolan would attempt to crack the passwords, where necessary, to gain administrative access. He would then remotely install software programs called ‘keystroke loggers’ (or ‘sniffers’) onto the POS systems. These programs would record, and then store, all of the data that was keyed into or swiped through the merchants’ POS systems, including customers’ payment card data.”

               

The co-conspirators hacked into several hundred U.S. merchants’ POS systems. It was reported that Dolan stole payment card data belonging to approximately 6,000 cardholders and was aware that Oprea was engaged in similar conduct. Dolan would periodically remotely hack back into the compromised merchants’ POS system to retrieve the card data that he would transfer to electronic “dump sites,” where the data would then be used to make unauthorized chargers and transfers or sold to other conspirators.

“The Subway case is a clear indication that privileged and administrative accounts are increasingly targeted and used by criminals to steal sensitive information,” says Adam Bosnian, vice president of products, strategy and sales at Cyber-Ark Software www.cyber-ark.com.  “In this case, the attackers were able to simply do an Internet search for remote desktop applications that were used by the restaurants, and through simple password cracking techniques, they were able to gain administrative access to the systems.  This enabled them to easily steal sensitive financial information from unsuspecting customers.”

Bosnian contends that often sensitive accounts are protected by passwords that are too simple or default passwords that are rarely changed. This case is a warning to operators utilizing POS systems to shore up their security by taking steps to make their accounts more difficult to breach and therefore less attractive to hackers.

“These privileged and administrative accounts act as a gateway to any organization’s most sensitive information, which is why they’ve emerged as the primary target for attackers,” Bosnian continues, “The reality is that anyone with an Internet connection can search for, identify and target  remote applications that businesses rely on – the problem facing the industry is that there is not sufficient security and protection around the entry points to these applications. Once inside, attackers have free reign on the network. If you examine the list of the recent, high-profile data breaches that have plagued organizations, including Global Payments, the U.S. Chamber of Commerce, the Utah healthcare breach, etc…, the common denominator is that the attackers focused on gaining access to the privileged or administrative accounts.” 

- Thanks to HT

POS restaurant system software to run your coffee shops

Restaurant POS are an important aspect of point-of-sale technology. Systems like pizza POS software, restaurant point of sale system, restaurant POS system, point of sale bar, restaurant software, fine dining restaurant have been making the complicated hospitality management as easy as typing just a few words into a computer—that’s all it takes. Manual order taking and passing it on to the kitchen is sometimes becomes a cumbersome job and then bringing the food to the table is again time consuming. All in totality will take at least half an hour. restaurant POS system has made this work easy task. Here you will have touch screen menus, remote ordering and printing, automated billing, and guest account organization and staff supervision at your fingertips.

We believe in running our organization smoothly and have introduced three different Restaurant POS systems that are for our front-office, back-office and kitchen administration. To provide the fast customer services and order management of a restaurant, the track number of the customer can be easily kept in track. Our system basically consists of administration software that has electronic menu screens and order processing through monitors. The Restaurant POS system has given us the organized running of the restaurant with an accurate record of minute-to-minute activities on any particular day. The restaurant software is very helpful in storing the information in single database on timekeeping, inventory, stock management, security and there are other activities too, to keep the restaurant open and running.


Being having different departments, our restaurant POS system require input and output devices as in any other computer system. The keyboards , touch screen and line displays as input devices, while others use electronic cash registers as both input and output devices. According to the customer demand, the restaurant POS system used by us acts as sophisticated cash registers with printers and monitors in different, but convenient locations and connected through an interface to the server at the back office.

We have a careful consideration of different activities that are needed to be controlled by the restaurant point of sale systems in a food establishment. The restaurant POS system launched by us has now been used in almost every restaurant and retail store for employing hospitality in one flavor or other. There has been a great advancement in computer technology and pizza pos software that has made it possible for smaller retail outlets and fast food restaurants to compete on a level playing field against large corporations with out breaking the bank.


Allowing many of the smaller retail chains to purchase the retail software systems, restaurant point of sale system software, pizza pos software, bar POS, restaurant POS system, point of sale bar, restaurant software, fine dining restaurant has come down in price over the years to an affordable level. Easy to manage, modular yet simple and easy to update, Restaurant POS software is designed allowing smaller restaurants and shops to install basic systems and software functionality with the ability to upgrade by switching on built in modules as and when business dictates.