Dozens of retailers have been infected with a family of malware that stole payment card and personal information from some 50,000 customers. Researchers with RSA’s FirstWatch security team declined to name the victimized retailers. ChewBacca, a private Trojan that hasn’t been spotted for sale in the underground, was first revealed in December by Kaspersky Lab. The malware is self-contained and installs a copy of itself in the Windows Start > Startup folder as a Windows print spooler service. The attackers run their command-and-control communications over the Tor network.”]

