There’s a versatile, easy-to-use utility being offered for sale on underground hacker forums, called HackMachine. It allows users to target victim domains and scan sites for known vulnerabilities, attempt brute force attacks, and ultimately inject paycard skimmers or exfiltrate user databases and personally identifiable information.

Ilya Vovovik and Shane Asher are researchers at Gemini Advisory, a Recorded Future company, and they join us with key findings from their research into HackMachine, along with advice on how to best protect your organization against it.