Visa Security Alert - Cybercrime Groups Targeting Fuel Dispenser Merchants

Visa Payment Fraud Disruption (Dec 2019) reports three POS compromise incidents affecting North American fuel dispenser and hospitality merchants where attackers gained network access (via phishing or unknown vectors), moved laterally into POS environments, and deployed RAM-scrapers and backdoors to harvest track/mag-stripe data; some activity is attributed to FIN8 and includes hashes, C2 domains, and stager addresses along with mitigation guidance.