Update: RSA Warns of Supply Chain Attack on Point of Sale Vendors

RSA detected a spear-phishing campaign targeting employees of a European Point of Sale vendor where a malicious Word attachment installed the Vawtrak banking Trojan; RSA links the activity to the PoSeidon campaign and assesses it as an attempted supply-chain subversion aimed at compromising vendor firmware/software or establishing lateral access to merchants, creating serious downstream risk despite the limited number of directly targeted employees.