
Getty/Alex Wong
The malware-laced email was sent to an employee of Fazio Mechanical, a Pennsylvania heating and air conditioning company that was doing business with Target, Krebs wrote, citing sources close to the investigation.
After gaining access to the employee's computer, the hackers could then enter Target's computer system, according to the report.
Fazio confirmed last week that it was "the victim of a sophisticated cyber attack operation."