crp Posted January 13, 2022 Share Posted January 13, 2022 let me introduce you to the company i work at. today i found out that there was a virtual machine running Windows7. On the network. In the domain. Without current antivirus. Connected to the Internet. with the default and used login of a Domain Admin. keep in mind we got hit with ransom ware 11 months ago and did not really recover. we are half (maybe 40%) of the size we were a year ago. oh, and why did this setup exist? the homegrown application needed 32bit ODBC drivers to do the transactions - yes, transactions. This machine was taking in creditcard numbers and getting them verified online. Now you know why these cyber breakins just don't stop. 2 1 2 Quote Link to comment Share on other sites More sharing options...
V.T. Eric Layton Posted January 13, 2022 Share Posted January 13, 2022 13 hours ago, crp said: Now you know why these cyber breakins just don't stop. Seems like a clear case of STUPIDITY, which is the common denominator in most commercial and private virus/malware infestations. You'd think people would learn... 1 1 Quote Link to comment Share on other sites More sharing options...
ebrke Posted January 13, 2022 Share Posted January 13, 2022 21 hours ago, crp said: the homegrown application needed 32bit ODBC drivers to do the transactions - yes, transactions. This machine was taking in creditcard numbers and getting them verified online. Ouch! Quote Link to comment Share on other sites More sharing options...
goretsky Posted January 14, 2022 Share Posted January 14, 2022 Hello, Wow. Regards, Aryeh Goretsky Quote Link to comment Share on other sites More sharing options...
xrobwx71 Posted January 14, 2022 Share Posted January 14, 2022 On 1/12/2022 at 8:39 PM, crp said: let me introduce you to the company i work at. today i found out that there was a virtual machine running Windows7. On the network. In the domain. Without current antivirus. Connected to the Internet. with the default and used login of a Domain Admin. keep in mind we got hit with ransom ware 11 months ago and did not really recover. we are half (maybe 40%) of the size we were a year ago. oh, and why did this setup exist? the homegrown application needed 32bit ODBC drivers to do the transactions - yes, transactions. This machine was taking in creditcard numbers and getting them verified online. Now you know why these cyber breakins just don't stop. At my retail store,I pay a yearly fee (very inexpensive) to be PCI compliant. Matter of fact, if I'm not PCI compliant, the company that processes my credit card transactions fines me monthly. (very expensive) Speaking for Florida, USA Quote Link to comment Share on other sites More sharing options...
crp Posted January 16, 2022 Author Share Posted January 16, 2022 unbelievably, they actually listened to me about this. boss frontburned the programmer to get it done and Friday morning it was on a W10 with current AV. (now if i can only get the tightVNC people to start paying attention to my messages ...) 1 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.