Tag Archives: Point Of Sale Systems

Hospitality Industry Technology Solutions: New Restaurant POS And Video Integration Software “Flags Questionable Transactions, Events And Conditions” To Reduce Employee Theft

“…software that can isolate POS activity not in compliance with performance standards and that is integrated with accompanying video Restaurant Employee Theftprovides training opportunities and also highlights suspicious activity of a particular cashier or manager…top that off with a video catching an employee in the act and it’s icing on the cake…The cloud-based system, which now has a real-time mobile app to alert  managers when suspicious activity occurs,  gives managers hard data on their employees, said Lori Kittle, CIO of Landry’s, the company behind 40 restaurant brands, including Morton’s, Bubba Gump and McCormick & Schmick’s…”

The National Restaurant Association estimates that internal employee theft is responsible for 75 percent of inventory shortages and about 4 percent of restaurant sales. Three-quarters of employees steal from the workplace at least once, while half steal repeatedly.

Another company specializing in detecting and preventing employee theft is EZConnect, which is used in Subway and Dunkin Donuts units. The platform features the ability to integrate digital video with the POS system as well.

“Suspicious cash transactions can be pinpointed and reviewed quickly, avoiding hours of research on standard digital camera systems,” Michael Starer, CEO of Profit Enhancement Technologies Inc., the company behind EZConnect.

For more:  http://www.fastcasual.com/article/219487/Using-technology-to-stop-restaurant-theft

Comments Off on Hospitality Industry Technology Solutions: New Restaurant POS And Video Integration Software “Flags Questionable Transactions, Events And Conditions” To Reduce Employee Theft

Filed under Crime, Labor Issues, Liability, Management And Ownership, Technology, Theft

Hospitality Industry Cybercrime Risks: Hotel And Restaurant “Connected Point-Of-Sale (POS) Systems” Attacked By New Malware Called “Dexter”; Steals Credit Card Data And Transmits It “Encrypted” Back To Attacker

“…Just before the 2012 festive period, a new piece of malware surfaced and was found in hundreds of POS systems in hotels, restaurants, retailers and private parking providers. The malware was discovered by Israel-based security cybercrime in hotelsfirm Seculert: ‘Dexter’ (which comes from the string ‘BKDR_DEXTR.A’) is a data-theft tool used to target and attack POS systems. The program, which is Microsoft Windows-based, uses common techniques to search the memory of running processes to identify credit-card track data, but with the uniqueness of the attacker having full control…”

Connected point-of-sale (POS) systems – that’s the checkout to you and me – are the most recent targets of the cybercriminal, and a specially-crafted malware, dubbed Dexter, is further indication that now all kinds of connected devices may be vulnerable to attack.

Seculert CTO and co-founder Aviv Raff explains that while the company is as yet uncertain as to who is behind Dexter, the author is fluent in English: Dexter mainly targeted English-speaking countries. The malware was located in 40 different countries, but notably 42 per cent of POS systems targeted were in North America and 19 per cent UK-based. “Instead of going through the trouble of infecting tens of thousands of consumer PCs or physically installing a skimmer, an attacker can achieve the same results by targeting just a few POS systems with specially crafted malware,” Raff says.

The malware injects itself into the iexplore.exe file in Windows servers, through rewriting in the registry key. It then’ pinches sensitive credit-card data from the server, before transferring it through a remote command and control system. Windows-based POS systems are used increasingly in the industry, and according to Seculert’s findings, 51 per cent of targeted POS systems use the outdated Windows XP. The high percentage indicates Windows-based machines that process unencrypted track data are viable targets.

Microsoft Windows XP may be the ‘preferred’ choice for POS systems, especially among smaller retailers who feel that they cannot afford to upgrade, but with the operating system to be discontinued in 2014, the question is over what support will be offered for remaining XP users and if they will be able to handle the upgrade to Windows 7 or 8.

“Dexter only has three purposes in life,” says Trustwave’s security researcher Josh Grunzweig. “To always be running on the victims’ machine, to find any card, or track, data in any running program on the victim, and to communicate with the attacker who is controlling it.”

The latter is what makes the malware stand out and impresses Grunzweig. “I can’t remember the last time I saw a piece of malware that targeted POS systems that had a nice command and control structure to it,” adds Grunzweig.

He explains the hacker maintains control of the attack by using normal communication methods, but with the skill to hide what it was sending by encoding the data. This involved sending out a message to the attacker, by default, every five minutes and also checks the victim to see if there is any track data running every 60 seconds.

The magnetic strip on a credit card contains three tracks and the malware attempts to extract data from memory relating to tracks one and two, containing numeric or alphanumeric data that can be used to clone the card that was used in a transaction. If Dexter finds any of this track data, it alerts the attacker in the next message sent and the process is repeated. The attacker has the control to change the times and install additional malware or even remove Dexter altogether.

“The most unusual thing about Dexter is the small amount of public attention it has received,” says Trustwave’s Josh Grunzweig. “The issues that make POS-specific malware difficult to discuss in the industry also affects the ability of antivirus companies; without samples they are unable to provide detailed protections for specific threats.”

For more:  http://eandt.theiet.org/magazine/2013/03/turn-on-log-in-checkout.cfm

Comments Off on Hospitality Industry Cybercrime Risks: Hotel And Restaurant “Connected Point-Of-Sale (POS) Systems” Attacked By New Malware Called “Dexter”; Steals Credit Card Data And Transmits It “Encrypted” Back To Attacker

Filed under Claims, Guest Issues, Liability, Management And Ownership, Privacy, Risk Management, Technology, Theft