Cyber-attacks
have made millions of consumers of American victims, simply at their favorite
store by shopping, by doing an online banking or package shipping. In frequency
data breaches are increasing, as well as the credit card information of more
people has used maliciously. As we take the target organization. While this
organization is the 2nd largest US retail discount chain, in
December 2013, target was the victim of large-scale cyber-attack. Between
November 27 and December 70 million data from 110 million customers was
hijacked including personal data of 70 million customer and 40 million banking
data. But this was not recognized by the organization Target. The secret
services of America have detected this crime by the abnormal activity in bank
as well as warned the brand. In Eastern Europe the hacker group was located,
according to the security services of US (Finkle & Skariachan, 2013).
To
read information from the credit card terminals it had installed malware in
cash registers. This technique is called the RAM scraping. On the black market
the attackers resold, once the data has been hijacked. For state investigations
into the attack as a settlement to pay over 18 million dollars target was
ultimately required. As the target company take two years to come back its
financial state or build the trust of their customer. When the story is
unfolded it is clear that 11 gigabytes of data containing the names, addresses
of mailing, contact numbers as well as for up to 70 million people payment card
information. For the retailer and many of its peers the following 12 months
were tumultuous.
The
data security as well as the payment system is weak. Because of this incident
first time in the history the CEO of the target company got fired. The target
company after that takes several actions to repair as well as improve the
security. A new senior leadership with cyber security knowledge brought by the
retailer. EMV-compliant the retailer also rolled out POS terminals in all of
its nationwide stores (Vijayan, 2014).
Yes,
this RAM scarping can be used for mal-intent on transaction process System.
This TPS can be considered as an information
processing system, and that can be used
for business transactions that can be collection, modification and for all data
transaction. The information that is
placed in the credit card so if there is business transection, they can easily
hack this transection through this technology and the information will be saved
and can be encrypted again.
References of Cyber-Attack
Finkle, J., & Skariachan, D. (2013, December 9). Target
cyber breach hits 40 million payment cards at holiday peak. Retrieved from
https://www.reuters.com/article/us-target-breach/target-cyber-breach-hits-40-million-payment-cards-at-holiday-peak-idUSBRE9BH1GX20131219
Vijayan, J. (2014, februraury 6). arget breach happened
because of a basic network segmentation error. Retrieved from
https://www.computerworld.com/author/Jaikumar-Vijayan/