The big unanswered question is how the malware was installed on POS devices in 1,700 stores. The configuration and network connections of these machines would t

The big unanswered question is how the malware was installed on POS devices in 1,700 stores. The configuration and network connections of these machines would typically be rigorously controlled and audited. Initially it looked like the BMC BladeLogic configuration management tool was compromised, which could be the conduit to the POS devices. The POS already trusts BladeLogic for config changes and patches. But now McAfee and BMC say the malware was just masquerading as BladeLogic. Sure wish Target would explain what happened so the rest of us can protect ourselves.