There’s a versatile, easy-to-use utility being offered for sale on underground hacker forums, called HackMachine. It allows users to target victim domains and scan sites for known vulnerabilities, attempt brute force attacks, and ultimately inject paycard skimmers or exfiltrate user databases and personally identifiable information.
Gemini Advisory’s Ilya Vovovik and Shane Asher join the Recorded Future podcast with key findings from their research into HackMachine, along with advice on how to best protect your organization against it.