Another cyber attack, Fin5 steals 150,000 credit cards!
A casino, whose name we don't yet know, has lost 150,000 credit cards in a cyber attack. The group responsible for the incident is Fin5, a new hacking group that hacked the casino's payment systems.
Researchers Emmanuel Jean-Georges and Barry Vengerik of Mandiant and FireEye uncovered the group.
The casino, which had no security whatsoever, did not even have a basic firewall for its payment platforms. It also did not have a proper logging process.
Fin5 is linked to numerous payment card breaches, including this one of Goodwill. According to Emmanuel Jean-Georges, the Fin5 team has caused breaches in 12 businesses. It is expected that six more businesses may already have been affected by this group.
“It was a very flat network, single domain, with very limited controls for accessing its payment systems,” Emmanuel said at the Cyber Defense Summit held in Washington, DC.
Barry Vengerik explained that the attackers have targeted at least two payment systems, and the casino's system is one of them. In the specific attack against the casino, experts discovered that the Fin5 used a backdoor codenamed Tornhull and a VPN called Flipside to maintain control of the affected systems.
Fin5 also has a tool called GET2 Penetrator, which is a scanning tool that looks for remote login and hard-coded credentials, and a free tool called EssentialNet that is used for scanning the target network.
