US feds were spotted raiding a warehouse belonging to Chinese payment terminal manufacturer PAX Technology in Jacksonville, Florida, on Tuesday, with speculation abounding that the machines contained preinstalled malware.
PAX Technology is headquartered in Shenzhen, China, and is one of the largest electronic payment providers in the world. It operates around 60 million point-of-sale (PoS) payment terminals in more than 120 countries.
Security buff Brian Krebs reported the raid could be tied to cyber-attacks on organizations in the US and EU, and that a major American payment processor noticed the terminals exhibiting suspicious behavior. Allegedly the machines were opening unexplained connections to systems in China, and the data transferred didn’t look like software updates or something like that.
Source: The Register