Tuesday, July 22, 2014
Hackers attack shipping/logistics firms with malware embedded in scanners
China-based hackers are using high-level malware installed on handheld scanners to attack shipping and logistics organizations from all over the world.
Cyber-security firm TrapX uncovered the "Zombie Zero" attack. TrapX said the attack originated at a Chinese company that provides hardware and software for handheld scanners used by global shipping and logistics firms to inventory the items they handle.
The Chinese manufacturer installs the malware on Windows XP operating systems embedded in the devices. The threat is also distributed via the company's support website, the security firm said in its report.
The scanners send the data they collect (origin, destination, value, contents, etc.) via the customer's wireless network. Once the customer starts using the device, the malware immediately sends this information back to a command and control server located in China. TrapX said the companies that use the scanners install security certificates for network authentication, but the certificates are compromised because the malware is already present on the device.
Experts discovered that the threat group targets servers storing corporate financial data, customer data and other sensitive information.
"By compromising cryptographic keys and digital certificates, Zombie Zero attackers obtained trusted, authenticated status on their victim's network," Kevin Bocek, vice president of security strategy and threat intelligence at Venafi, told SecurityWeek. "We are seeing this time and time again with APT1, Careto/Mask, and now Zombie Zero.
"The rising tide in circumventing keys and certificates will only increase as more sophisticated evasion and takeover techniques are required as all businesses and governments wake up to the fact they are being targeted and are already breached."
For more of the Security Week story: securityweek.com
More Newswire stories
Drewry: Carrier alliances necessary to cut costs and improve service
Maersk announces Asia-Europe freight increase of $450 per-TEU
Greenbrier and Watco complete railcar repair joint venture
South Carolina ports post 8 percent container growth for FY2014
Home | The Magazine | Conferences | Port Handbooks | Newswire | Advertise | Ocean Schedules | Contact
CBN Archives | About CBN | Subscribe to CBN | Marine Fuels Conference | Southeast Freight Conference | Heartland Shippers’ Conference | Port Productivity Conference | Pacific Northwest Ports Handbook
Golden Gates Ports Handbook | Southern California Ports Handbook | Buy Handbooks | Subscirbe to Newswire | Newswire Archives | Upload Files