‘);
}
document.write(‘
‘);
document.write(‘
‘);
jQuery(‘.navTab’ + ad_AdvertiserArray.data[adt].advertiserID).click(ad_AdvertiserArray.data[adt], function(eventObj){
window.location.href = “http://” + hostEnv + “www.startribune.com/weekly-ads/?dppAID=” + eventObj.data.advertiserID;
});
jQuery(‘.navTabWa’ + ad_AdvertiserArray.data[adt].advertiserID).click(ad_AdvertiserArray.data[adt], function(eventObj){
window.location.href = “http://” + hostEnv + “www.startribune.com/weekly-ads/?dppAID=” + eventObj.data.advertiserID;
});
}
‘);
}
dppNavTab.start();
hide
In this Jan. 18, 2008 file photo, a customer signs his credit card receipt at a Target store in Tallahassee, Fla.
Photo: Phil Coale, ASSOCIATED PRESS – AP
ul > li > a > img {
margin-left: 4px;
}
]]>
- 7
- comments
-
resize text
- buy reprints
Thieves stole the network credentials from Target’s heating and refrigeration contractor via an e-mail phishing attack sent to the contractor’s employees at least two months before they began hoovering up card data from cash registers, according to the blogger who first revealed the attack.
Data security reporter Brian Krebs blogged Wednesday at KrebsonSecurity.com that Target’s breach was set up by a “malware-laced e-mail phishing attack” on employees of Sharpsburg, Pa.-based Fazio Mechanical Services Inc. Krebs cited “multiple sources close to the investigation.”
“Two of those sources said the malware in question was Citadel — a password-stealing bot program that is a derivative of the ZeuS banking trogan — but that information could not be confirmed,” Krebs said.
Fazio was using a free version of Malwarebytes Anti-Malware as its main tool for detecting malicious software on its internal system, Krebs said, adding that he considered that a flawed approach.
Krebs said that a former member of Target’s security team, who was not identified, told him that Target’s vendors use Ariba software to complete their work orders and collect payments.
That person speculated that Ariba’s back end, which allows Target administrators to provide vendors with login credentials, would potentially give a vendor access to the server, and then potentially some form of access to the rest of Target’s corporate network.
Target’s breach, in which payment card data or personal information of up to 110 million customers was stolen, is one of the country’s largest recorded data security breaches and remains under investigation.
Jennifer Bjorhus • 612-673-4683
‘);
}
if(jQuery.inArray(‘2611’, userSubsArray ) == -1) {
document.write(‘
‘);
}
if(jQuery.inArray(‘2751’, userSubsArray ) == -1) {
document.write(‘
‘);
}
‘);
}
ul > li > a > img {
margin-left: 4px;
}
]]>
- 7
- comments
-
resize text
- buy reprints
ADVERTISEMENT
- Most read
- Most Emailed
- Most Watched
<![CDATA[
]]>
ADVERTISEMENT
ADVERTISEMENT
ADVERTISEMENT
ADVERTISEMENT
ADVERTISEMENT
ADVERTISEMENT
inside the StarTribune
sports
Complete coverage of Sochi Winter Olympics
minnesota topics
Minnesota Topics: Latest on Target Corp.
sports
local
Saving Bobbi: A teen’s sex trafficking ordeal
help
lifestyle
Kid’s’ Health: Latest news and advice
-
425 Portland Av. S.
Minneapolis, MN 55488
(612) 673-4000
© 2014 StarTribune. All rights reserved.
StarTribune.com is powered by Limelight Networks