Hackers target supply chains with rigged inventory scanners

© Khunaspix Dreamstime.

Handheld inventory scanners, produced by an unnamed Chinese manufacturer and used to track shipments in the supply chain, have had the “ZombieZero” malware inserted into them, a Californian hi-tech security firm has discovered. At least seven shipping companies have fallen victim to the security breach, with shipping information such as manifests stolen.

“The exfiltration of all financial data as well as CRM data was achieved providing the attacker complete situational awareness and visibility into the shipping and logistics targets worldwide operations,” ...