So, #Handala have been busy bees. They announced that they have control of Verifone’s Retail 360 (R360) payment management environment, at least in Israel.

#Veriphone is denying the attack, but screenshots suggest otherwise. I have documented similar systems, and the screenshots show sudo level access. So, somebody isn’t telling the truth.

My big fear here is that we’re not hearing about the real threats. We’ve known for years that unfriendly actors had access to infrastructure. Verifone and Stryker are bothersome, but not critical. I think these are warning shots and proof of concept, and things are about to get scary.

https://cybernews.com/cyber-war/iran-linked-hackers-verifone-stryker-cyberattacks-handala/