Bankinfosecurity Iranian Hacking Group Handala Claims Attack on Payment Processor Verifone
Article Content
- •Iranian group Handala claims to have attacked Verifone, a payment processing giant.
- •Verifone disputes the claim, asserting no data breach occurred.
- •The attack reflects ongoing geopolitical tensions involving Iran.
The Iranian hacking group Handala has claimed responsibility for a cyberattack against Verifone, a major payment processing company. The attack reportedly involved wiping data from Verifone's systems, impacting their operations. Verifone has disputed the claims, stating that they have not suffered a data breach. This incident occurs amidst ongoing geopolitical tensions between the U.S., Israel, and Iran, suggesting a potential state-sponsored motive behind the attack. The specific attack vector and tools used by Handala have not been disclosed. As of now, Verifone continues to operate normally and has not reported any significant disruptions. The full scope of the impact remains unclear, but the incident highlights the increasing risks faced by critical infrastructure in the payment sector. No specific CVEs or IOCs have been identified in the articles.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (1)
Following this threat?
Track Verifone in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…