Visa Inc. · NYSE:V

Visa — 2017 Sub-Saharan Africa Risk Executive Council

13 slides from Visa's conference presentation, 2017

1. Slide 1: Emerging Threats: eCommerce Malware

   Emerging Threats eCommerce Malware Sam Cleveland Sr. Risk Analyst Payment Systems Intelligence

2. Slide 2: Disclaimer

   Disclaimer The information or recommendations contained herein are provided "AS IS" and intended for informational purposes only and should not be relied upon for operational, marketing, legal, technical, tax, financial or other advice. When implementing any new strategy or practice, you should cons

3. Slide 3: Agenda

   Agenda • What is eCommerce malware • How do attackers gain access • Common skimming malware • What to do after a compromise • How to protect against attacks 3 | 2017 Sub-Saharan Africa Risk Executive Council Visa Public Visa Confidential

4. Slide 4: eCommerce Malware

   eCommerce Malware • Targets eCommerce transactions • Shoplift • MageCart • Online Skimming 4 | 2017 Sub-Saharan Africa Risk Executive Council Visa Public Visa Confidential

5. Slide 5: Initial Intrusion

   Initial Intrusion • Admin Login • Outdated Software • Insecure Software • Insecure Server Settings *Source: Survey of PCI Forensic Investigators 5 | 2017 Sub-Saharan Africa Risk Executive Council Visa Public Visa Confidential

6. Slide 6: Skimming Malware

   Skimming Malware https://cameras-cameras-cameras.shop • Remote and local <script src="//ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js" type="text/javascript"></script> • Hidden in plain sight <!--[if (gt IE 9)|!(IE)]><!--><script src="//cdn.shopfiles.com/s/files/1/0543/1637/t/13/assets/v

7. Slide 7: I’m compromised! Now what?

   I’m compromised! Now what? 7 | 2017 Sub-Saharan Africa Risk Executive Council VisaVisa Confidential Public

8. Slide 8: Recommended Steps

   Recommended Steps • Perform a full security audit – Review source code and databases for malware – Run anti-virus/anti-malware – Remove malicious code • Change administrative passwords • Update website software – eCommerce platform – Add-on software • Validate PCI DSS compliance 8 | 2017 Sub-Saharan

9. Slide 9: How can I prevent an infection?

   How can I prevent an infection? 9 | 2017 Sub-Saharan Africa Risk Executive Council VisaVisa Confidential Public

10. Slide 10: Recommended Steps

    Recommended Steps • Document a comprehensive security process • Perform regular backups • Enable security and access logging • Run anti-virus and anti-malware scans regularly – External and Internal scans • Follow industry security standards – https://www.pcisecuritystandards.org/pdfs/best_practices

11. Slide 11: Recommended Steps

    Recommended Steps • Web Application Firewall – Blocks suspicious and malicious requests from reaching your website • Secure and limit access to your administrative portal – Limit administration accounts to those who need them – Require strong passwords (use a password manager for best results) – Ena

12. Slide 12: Questions?

    Questions? [email protected] https://usa.visa.com/support/merchant/library.html

13. Slide 13: Thank you

    Thank you

Visa — 2017 Sub-Saharan Africa Risk Executive Council on 6ix