New vulnerability in pos devices: Prillex

According to information from Kaspersky, the cybercriminal organization known as Prillex is now targeting POS devices, thanks to the malware they developed and has the same name.

This software, which was previously used to steal card information in bank ATMs, also accesses POS terminals with its new versions. Attackers infect the target system by using remote access applications such as “AnyDesk”.

In the working mechanism of this malware, the contactless payment feature on the Pos device is turned off by the virus. This is because the NFC feature used in contactless payment is made more secure by using some encryption algorithms. Since this feature is turned off, the victim is forced to insert the card into the pos device and the card information is captured.

Some of the measures we should take to protect ourselves from such attacks are as follows;

• If your pos device refuses contactless payment for no reason, control should be provided,

• End users should be trained according to the developing attack types,

• To protect from cyber attacks, security solutions that protect against advanced threats should be used.

• The devices you use on your system should be backed up regularly.