Attacks/Breaches
9/2/2014
01:35 PM
Connect Directly
Google+
Twitter
RSS
E-Mail
100%
0%

Home Depot The Latest Hack Victim?

Home improvement chain--along with law enforcement and banks--are investigating 'unusual activity.'

Another day, another possible retail breach: Home Depot reportedly is looking into a potential data breach.

KrebsOnSecurity reported today that several banks have seen signs of a potential credit and debit card breach at Home Depot. Specifically, a fresh collection of payment cards that have appeared in the cyber underground may be those from sales at the home improvement chain. A Home Depot spokesperson told KrebsOnSecurity:

    I can confirm we are looking into some unusual activity and we are working with our banking partners and law enforcement to investigate... Protecting our customers' information is something we take extremely seriously, and we are aggressively gathering facts at this point while working to protect customers. If we confirm that a breach has occurred, we will make sure customers are notified immediately. Right now, for security reasons, it would be inappropriate for us to speculate further -- but we will provide further information as soon as possible.

The attackers behind the payment card breach may be the same Russian and Ukrainian cybercrime gang that hit Target, Sally Beauty, P.F. Chang's, and other retailers, the report said.

Interestingly, the gang named the newly pilfered card "American Sanctions" in an apparent jab at US economic sanctions against Russia.

The breach could affect 2,200 US Home Depot stores, according to KrebsOnSecurity.

Kelly Jackson Higgins is Executive Editor at DarkReading.com. She is an award-winning veteran technology and business journalist with more than two decades of experience in reporting and editing for various publications, including Network Computing, Secure Enterprise ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
NormanSwe
50%
50%
NormanSwe,
User Rank: Apprentice
9/10/2014 | 3:25:03 PM
Re: Another Attack?
I recently had a problem with Phishing attacks can be very dangerous and users should be Careful When some receive suspicious emails, phone calls etc. Here are sime articles with some tips how to Avoid Them: stickypassword.com
GonzSTL
50%
50%
GonzSTL,
User Rank: Ninja
9/5/2014 | 3:48:51 PM
Re: Another Attack? What a Surprise!
I find it interesting that there is nothing new in Home Depot's Media Center regarding this situation. Krebs gathered zip code information on the cards for sale on the rescator site and then correlated them with the zip code of Home Depot locations, resulting in a 99.4% overlap. It would be an unusually big coincidence if there was no breach. Although I understand that they could be tight lipped about it because it is an ongoing investigation, I hope that something is already being done to mitigate the risk of fraud that could potentially result from the sale of those cards.
Kelly Jackson Higgins
50%
50%
Kelly Jackson Higgins,
User Rank: Strategist
9/3/2014 | 12:17:13 PM
Re: Another Attack? What a Surprise!
No shock here, for sure. Likely most major retailers are 0wned and either don't know it yet or aren't talking yet. 

Home Depot just issued this message to their customers--no confirmation of the breach yet, but basically a heads up.

https://corporate.homedepot.com/MediaCenter/Pages/Statement1.aspx
GonzSTL
50%
50%
GonzSTL,
User Rank: Ninja
9/3/2014 | 9:56:28 AM
Another Attack? What a Surprise!
Ho hum ... just another company breach, another fresh batch of credit cards on the black market, more banks absorbing fraud and credit card reissuances, insurance companies paying out, another brand tarnished, causing consumers to lose faith in the company, and another company gets hammered at the stock exchange. The result - just another company scrambling to entrench their data in a veritable fortress of security. Just another example of 20-20 hindsight! When will organizations take security seriously enough to make it one of their top priorities? When will executive management get the message that unless they lead this charge, they will be ... just another company that gets breached? Data breaches have become almost a weekly news item, and will continually be so for the foreseeable future.

Here is what I think it will take to convince executive management to elevate the whole security agenda. Imagine a company breach that results in a total electronic data loss in their production environment. Think about that for a second - no sales because they have no idea what products they have, no working POS system, no customer data, nothing in the form of electronic data processing ... nothing. Nothing moves in the company until their DR plans kick in and achieve business continuity. Data breaches do not stop business from continuing operations, but a total data loss will. When that happens to a big name brand like Target or Home Depot, then company executives will realize that a new phase has arrived in the threat horizon. Data loss is a very scary scenario, but business stoppage is like a stake through the heart, difficult to recover from within a short time frame. I really hope it does not come to that, and that executives everywhere wake up and smell the coffee before that happens to them.
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-0986
Published: 2015-05-26
Multiple stack-based buffer overflows in Moxa VPort ActiveX SDK Plus before 2.8 allow remote attackers to insert assembly-code lines via vectors involving a regkey (1) set or (2) get command.

CVE-2015-3808
Published: 2015-05-26
The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVE-2015-3809
Published: 2015-05-26
The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet.

CVE-2015-3810
Published: 2015-05-26
epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet.

CVE-2015-3811
Published: 2015-05-26
epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperly refers to previously processed bytes, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, a different vulnerability than CVE-2015-...

Dark Reading Radio
Archived Dark Reading Radio
Join security and risk expert John Pironti and Dark Reading Editor-in-Chief Tim Wilson for a live online discussion of the sea-changing shift in security strategy and the many ways it is affecting IT and business.