Hackers Gain Access to Wiseasy Payment Terminals

Hackers have gained access to nearly 140,000 payment terminals worldwide. Wiseasy employees' passwords used to access cloud-based control panels have been found on a dark web marketplace, according to TechCrunch.

Hackers were able to gain access to the dashboards used to remotely manage and control thousands of credit card payment terminals. Thus, attackers were able to lock the device and remotely install and uninstall applications, as well as view names, phone numbers, email addresses and add new users and allow access to the Wiseasy dashboard.

Youssef Mohamed, chief technology officer at pen-testing and dark web monitoring startup Buguard, said hackers stole passwords using malware on employee computers because the two cloud-based dashboards were not protected by basic security features.

Youssef Mohamed, chief technology officer at pen-testing and dark web monitoring startup Buguard said the problems have been fixed and that the company has added two-factor authentication to the dashboards. However, the company has not yet notified its customers of the security lapse.

Wiseasy is a popular Android-based payment terminals maker in the Asia-Pacific region, used in restaurants, hotels, retail outlets and schools.