Credit Cards stolen from 51 UPS locations

By Mike Lennon on August 20, 2014 http://www.securityweek.com/sites/default/files/features/UPS-Store-Data_Breach.jpg
The UPS Store said on Wednesday that computer systems at several of its franchised center locations had been infected with stealthy malware that went undetected by its anti-virus software and put customer credit and debit card information at risk.
The shipping giant said that it received a government bulletin regarding a "broad-based malware intrusion targeting retailers" in the United States, which sparked the company to hire an IT security firm and conduct a review of its systems and the systems of its franchised center locations.
The investigation revealed that 51 locations in 24 states had been infected with the malware identified in the bulletin.
While UPS did not provide details on the type of malware that infected its systems, it was likely the “Backoff” malware that the U.S. Government first warned about late last month.
In a report released July 31 by the U.S. Department of Homeland Security’s US-CERT, security experts explained how cybercriminals are using legitimate programs as the first step to break into corporate networks and compromise point-of-sale systems with malware SecurityWeek/ Full Article Here/ http://www.securityweek.com/cybercriminals-deliver-point-sale-malware-51-ups-store-locations