SISA alerts banks about malware attack; asks to reset server passwords

Security firm Sisa on Tuesday warned all banks and payment processors to reset passwords for employees with access to payment servers. The advisory comes after it discovered that hackers had managed to insert malicious software into the payment switch server of an unnamed bank.

A malicious script (software code) has been injected into the payment switch application server — the hub which communicates with payment networks, a Sisi spokesperson told TOI.

What damage can the malware cause

* The malicious software can collect payment card data (including card number, expiry date, CVV and other customer information)
 

*