Security firm IntelCrawler has analyzed the recent massive data breaches of Target and Neiman Marcus systems. The company said it has identified the creator of the malware used in those attacks.
According to report , Sergey Taraspov, a 17-year-old boy from Russia, with the online alias 'ree[4]', appears to have first created the BlackPos malware sample in March 2013.
Initially the malware was referred to as “Kaptoxa” (“potato” – Russian slang), which was later referred to as “Dump memory grabber” on underground forums by the creator. The name “BlackPOS” was derived from the title used in C&C communications.
BlackPOS is a malware written in VBScript, designed to install itself on POS devices and steal all data from cards scanned through the infected system.
Based on its own sources, the company reported that the first victim of the malware is Point of Sale (POS) in Canada, the US, and Australia.
The creator has sold over 40 versions of the virus to cybercriminals from Eastern Europe and other countries, for $2,000.
The hacker has created many hacking tools including brute force attacks and other malicious tools. He has also earned some money by training on DDOS attacks and hacking social media accounts.
Finally, the company said that the real criminals behind the Target data breach were simply its customers.
