{"id":25970,"date":"2021-11-10T10:44:46","date_gmt":"2021-11-10T16:44:46","guid":{"rendered":"https:\/\/www.barcodesinc.com\/news\/?p=25970"},"modified":"2021-11-10T13:47:12","modified_gmt":"2021-11-10T19:47:12","slug":"pax-pos-cyberattacks-payment-terminals-compromised-fbi","status":"publish","type":"post","link":"https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/","title":{"rendered":"PAX POS Cyberattacks: Are Your Payment Terminals Compromised?"},"content":{"rendered":"\n

<\/p>\n\n\n\n

\"pax<\/a><\/figure>\n\n\n\n

<\/p>\n\n\n\n

First reported by WOKV.com<\/a>, agents with the FBI and DHS raided the Florida warehouse of PAX Technology<\/a>. The point of sale technology giant is linked to reports of possible cyberattacks on U.S. and E.U. organizations where the technology is used.<\/p>\n\n\n\n

Along with ongoing global computer chip shortages, the timing of the investigation is particularly concerning for retailers and payment processing companies preparing for the holiday season.<\/p>\n\n\n\n

FBI Raids PAX, Where POS Devices Are Potentially Compromised<\/h2>\n\n\n\n

KrebsOnSecurity<\/a> offered further detail, saying they “heard from a trusted source that the FBI began investigating PAX after a major U.S. payment processor started asking questions about unusual network packets originating from the company\u00e2\u20ac\u2122s payment terminals.”<\/p>\n\n\n\n

The source revealed that the PAX terminals were being used both as a central location for malicious files (also known as malware \u00e2\u20ac\u0153droppers\u00e2\u20ac\u009d). This allows payment technology to act as a staging ground for large-scale cyberattacks focused on collecting information such as consumer credit card data.<\/p>\n\n\n\n

\u00e2\u20ac\u0153FBI and MI5 are conducting an intensive investigation into PAX,\u00e2\u20ac\u009d the source said. \u00e2\u20ac\u0153A major US payment processor began asking questions about network packets originating from PAX terminals and were not given any good answers.\u00e2\u20ac\u009d<\/p>\n\n\n\n

<\/p>\n\n\n\n

\"pax<\/a><\/figure><\/div>\n\n\n\n

<\/p>\n\n\n\n

Major financial providers (including FIS Worldpay as reported by Bloomberg<\/a>) have already begun pulling PAX terminals from their payment infrastructure.<\/p>\n\n\n\n

FIS Worldpay confirmed that it no longer deploys PAX point-of-sale devices \u00e2\u20ac\u0153because it did not receive satisfactory answers from PAX regarding its POS devices connecting to websites not listed in their supplied documentation.\u00e2\u20ac\u009d<\/p>\n\n\n\n

\u00e2\u20ac\u0153While we have no evidence that data running through PAX POS devices has been compromised, we have been working directly with clients to replace those devices with other options at no cost to them and with as little disruption to their business as possible,\u00e2\u20ac\u009d FIS Worldpay states. \u00e2\u20ac\u0153The spokesperson said fewer than 5% of Worldpay clients currently use PAX point-of-sale devices.”<\/p>\n\n\n\n

While specific details about the strange network activity that prompted federal investigators are unknown, the investigation remains active and ongoing. <\/p>\n\n\n\n

It’s worth noting that POS terminals<\/a> and the technology that supports them are often a primary target for malware and criminal attacks.<\/p>\n\n\n\n

It is not uncommon for payment terminals to be compromised remotely by malicious software and made to collect and transmit stolen information. Notable point of sale breaches include Heartland Payment Systems (100 million payment cards affected in 2008) as well as the Target and Home Depot thefts of roughly another 100 million credit cards in 2014.<\/p>\n\n\n\n

PAX Technology’s Official Response to Cyberattacks<\/h2>\n\n\n\n

The Shenzhen-based company is quoted in Reuters<\/a> with the following statement:<\/p>\n\n\n\n

“As far as the board is aware … there has neither been any reported cyberattack incidents nor cyber attack complaints, including any breach of security protocols, against PAX products and services anywhere in the world.”<\/p><\/blockquote>\n\n\n\n

PAX’s statement<\/a> to the stock exchange in Hong Kong as well as a press release<\/a> on the company’s blog provide further perspective. Trading of the company’s shares resumed on November 1 after a temporary halt.<\/p>\n\n\n\n

At Barcodes, Inc., cybersecurity is our primary concern when we procure and deploy POS technology. We encourage you to contact us<\/a> if you have any questions or if you’re interested in replacing your PAX technology.<\/p>\n","protected":false},"excerpt":{"rendered":"

First reported by WOKV.com, agents with the FBI and DHS raided the Florida warehouse of PAX Technology. The point of sale technology giant is linked to reports of possible cyberattacks on U.S. and E.U. organizations where the technology is used. Along with ongoing global computer chip shortages, the timing of the investigation is particularly concerning for […]<\/p>\n","protected":false},"author":1,"featured_media":26005,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[12,22],"tags":[3418,3415,3414,3417,1481,3416,2149,205,237,1187,248],"yoast_head":"\nPAX POS Cyberattacks: Are Your Payment Terminals Compromised? - Barcoding News<\/title>\n<meta name=\"description\" content=\"PAX POS cyberattacks are being investigated by the FBI after a major U.S. payment processor started asking questions about unusual network packets originating from the company\u00e2\u20ac\u2122s payment terminals.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PAX POS Cyberattacks: Are Your Payment Terminals Compromised? - Barcoding News\" \/>\n<meta property=\"og:description\" content=\"PAX POS cyberattacks are being investigated by the FBI after a major U.S. payment processor started asking questions about unusual network packets originating from the company\u00e2\u20ac\u2122s payment terminals.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/\" \/>\n<meta property=\"og:site_name\" content=\"Barcoding News\" \/>\n<meta property=\"article:published_time\" content=\"2021-11-10T16:44:46+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-11-10T19:47:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/newscdn.barcodesinc.com\/news\/wp-content\/uploads\/2021\/11\/10132203\/PAX-POS-Cyberattack-FBI-Raid-Payment-Terminal.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"BarcodesInc\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"BarcodesInc\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/\",\"url\":\"https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/\",\"name\":\"PAX POS Cyberattacks: Are Your Payment Terminals Compromised? - Barcoding News\",\"isPartOf\":{\"@id\":\"https:\/\/www.barcodesinc.com\/news\/#website\"},\"datePublished\":\"2021-11-10T16:44:46+00:00\",\"dateModified\":\"2021-11-10T19:47:12+00:00\",\"author\":{\"@id\":\"https:\/\/www.barcodesinc.com\/news\/#\/schema\/person\/4887305f61b70f8fa89a8ca7343ec6d4\"},\"description\":\"PAX POS cyberattacks are being investigated by the FBI after a major U.S. payment processor started asking questions about unusual network packets originating from the company\u00e2\u20ac\u2122s payment terminals.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.barcodesinc.com\/news\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Barcode News\",\"item\":\"https:\/\/www.barcodesinc.com\/news\/category\/barcode-news\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"PAX POS Cyberattacks: Are Your Payment Terminals Compromised?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.barcodesinc.com\/news\/#website\",\"url\":\"https:\/\/www.barcodesinc.com\/news\/\",\"name\":\"Barcoding News\",\"description\":\"Barcode, Auto-ID, Point of Sale and RFID News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.barcodesinc.com\/news\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.barcodesinc.com\/news\/#\/schema\/person\/4887305f61b70f8fa89a8ca7343ec6d4\",\"name\":\"BarcodesInc\",\"sameAs\":[\"http:\/\/www.barcodesinc.com\"],\"url\":\"https:\/\/www.barcodesinc.com\/news\/author\/admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"PAX POS Cyberattacks: Are Your Payment Terminals Compromised? - Barcoding News","description":"PAX POS cyberattacks are being investigated by the FBI after a major U.S. payment processor started asking questions about unusual network packets originating from the company\u00e2\u20ac\u2122s payment terminals.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/","og_locale":"en_US","og_type":"article","og_title":"PAX POS Cyberattacks: Are Your Payment Terminals Compromised? - Barcoding News","og_description":"PAX POS cyberattacks are being investigated by the FBI after a major U.S. payment processor started asking questions about unusual network packets originating from the company\u00e2\u20ac\u2122s payment terminals.","og_url":"https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/","og_site_name":"Barcoding News","article_published_time":"2021-11-10T16:44:46+00:00","article_modified_time":"2021-11-10T19:47:12+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/newscdn.barcodesinc.com\/news\/wp-content\/uploads\/2021\/11\/10132203\/PAX-POS-Cyberattack-FBI-Raid-Payment-Terminal.jpg","type":"image\/jpeg"}],"author":"BarcodesInc","twitter_card":"summary_large_image","twitter_misc":{"Written by":"BarcodesInc","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/","url":"https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/","name":"PAX POS Cyberattacks: Are Your Payment Terminals Compromised? - Barcoding News","isPartOf":{"@id":"https:\/\/www.barcodesinc.com\/news\/#website"},"datePublished":"2021-11-10T16:44:46+00:00","dateModified":"2021-11-10T19:47:12+00:00","author":{"@id":"https:\/\/www.barcodesinc.com\/news\/#\/schema\/person\/4887305f61b70f8fa89a8ca7343ec6d4"},"description":"PAX POS cyberattacks are being investigated by the FBI after a major U.S. payment processor started asking questions about unusual network packets originating from the company\u00e2\u20ac\u2122s payment terminals.","breadcrumb":{"@id":"https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.barcodesinc.com\/news\/pax-pos-cyberattacks-payment-terminals-compromised-fbi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.barcodesinc.com\/news\/"},{"@type":"ListItem","position":2,"name":"Barcode News","item":"https:\/\/www.barcodesinc.com\/news\/category\/barcode-news\/"},{"@type":"ListItem","position":3,"name":"PAX POS Cyberattacks: Are Your Payment Terminals Compromised?"}]},{"@type":"WebSite","@id":"https:\/\/www.barcodesinc.com\/news\/#website","url":"https:\/\/www.barcodesinc.com\/news\/","name":"Barcoding News","description":"Barcode, Auto-ID, Point of Sale and RFID News","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.barcodesinc.com\/news\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.barcodesinc.com\/news\/#\/schema\/person\/4887305f61b70f8fa89a8ca7343ec6d4","name":"BarcodesInc","sameAs":["http:\/\/www.barcodesinc.com"],"url":"https:\/\/www.barcodesinc.com\/news\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.barcodesinc.com\/news\/wp-json\/wp\/v2\/posts\/25970"}],"collection":[{"href":"https:\/\/www.barcodesinc.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.barcodesinc.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.barcodesinc.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.barcodesinc.com\/news\/wp-json\/wp\/v2\/comments?post=25970"}],"version-history":[{"count":15,"href":"https:\/\/www.barcodesinc.com\/news\/wp-json\/wp\/v2\/posts\/25970\/revisions"}],"predecessor-version":[{"id":26016,"href":"https:\/\/www.barcodesinc.com\/news\/wp-json\/wp\/v2\/posts\/25970\/revisions\/26016"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.barcodesinc.com\/news\/wp-json\/wp\/v2\/media\/26005"}],"wp:attachment":[{"href":"https:\/\/www.barcodesinc.com\/news\/wp-json\/wp\/v2\/media?parent=25970"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.barcodesinc.com\/news\/wp-json\/wp\/v2\/categories?post=25970"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.barcodesinc.com\/news\/wp-json\/wp\/v2\/tags?post=25970"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}