Exclusive: Cybercrime firm uncovered six active attacks on U.S. merchants
The sign outside the Target store is seen in Arvada, Colorado January 10, 2014. — (Reuters) - The cyber security firm IntelCrawler said on Friday that it has uncovered six ongoing attacks at merchants across …
Context & Ripple Effects
This lands one week into the Target breach arc: Krebs on Security first showed the point-of-sale malware behind the intrusion on January 15, the U.S. government warned merchants about the hackers' methods on January 16, and Reuters had already reported sources saying more well-known U.S. retailers were victims. IntelCrawler's disclosure is the first to claim the campaign is not historical cleanup but live operations — six ongoing attacks at U.S. merchants, including Target.
Syndication across Computerworld, Forbes, ZDNet, Business Insider and others shows how far the story travelled, with the confirmed detail that stolen Target card numbers were transmitted to a server in Russia sharpening the geopolitical framing. With Target due to testify before Congress next month, each new disclosure feeds a hearing that is now shaping up as the industry's public accounting.
First-order effects
- The six unnamed merchants under active attack face an immediate triage problem: the government's January 16 warning gave them the attackers' methods days ago, and IntelCrawler's disclosure effectively starts a clock on detection, containment, and disclosure decisions.
- Target's breach response is no longer contained to its own incident — every new finding about the malware and the Russian exfiltration server lands while it prepares next month's congressional testimony.
Second-order effects
- Rival retailers must treat this as a sector-wide campaign rather than a Target-specific failure, accelerating emergency reviews of point-of-sale systems exactly as banks absorb the cost of reissuing millions of compromised cards.
- Security intelligence firms like IntelCrawler gain commercial leverage from naming active intrusions, pushing merchants toward outside forensics and making vendor disclosures part of the competitive breach-response market.
Third-order effects
- If point-of-sale malware proves systemic across retail, pressure will build for structural fixes — end-to-end payment encryption and chip-based cards — moving the burden off merchants' perimeter defenses onto the payment infrastructure itself.
- A pattern of live multi-merchant campaigns with overseas exfiltration gives legislators convening next month's hearings a concrete basis to consider breach-notification standards that apply across the retail sector.
The trend: Retail cybercrime is shifting from isolated breaches to coordinated point-of-sale malware campaigns hitting multiple merchants at once, pulling regulators and Congress into payment-security policy.