Contrary to previous reports, the Home Depot hackers seem to be different from Target's. According to two security firms working on the case, the hackers used a malware posing as an anti-virus program.
Dubbed as FrameworkPOS, the software differed significantly to the one used to attack Target Corp. Dan Guido, chief executive officer of the information security service Trail of Bits, said that the stark differences are strong indicators that the Home Depot hack was done by another group.
"The development of a new piece of malware is not something you take lightly -- this required some engineering. It's probably not the same group as hit Target," said Guido.
Another security research agency confirmed that the malware impersonates the McAfee Inc. antivirus. It's meant for the disguise to fool Home Depot's security team to prevent them from looking deeper into the matter, despite not using the antivirus software.
Chris Palm, a McAfee Inc's spokesman, said that their system isn't affected as they can easily detect and deflect the said malware. He said that the malware only resembled the antivirus software to fool investigators which is a common tactic in hacking.
The malware code is sprinkled with anti-American sentiments which don't affect the functionality of the program. The researchers said it seems to be a message from the hackers as there are links provided comparing the U.S.'s military intervention in Libya and its support of the Ukrainian government.
Lawmakers started the inquiry into the matter. Senator Jay Rockefeller and Senator Claire McCaskill sent a letter to Home Depot Chairman and chief executive officer Francis Blake, asking for a briefing.
Home Depot confirmed a data security breach on Sept. 8 after blogger Brian Krebs revealed two batches of stolen credit card details, pointing to the retailer as source, appeared online for sale.
It's estimated to be the largest hacking in history.
