Trusted Design

Unskal, Saluchtra, Dexter and IeEnablerCby

概要

POS malware target retail companies in an attempt to steal customer payment details, such as credit card information. The stolen data can then be sold in underground markets. These threats can be deployed to a system by brute-forcing log in credentials on machines with weak passwords. They can also be installed by other malware, or by exploiting software vulnerabilities. Related to http://blog.trendmicro.com/trendlabs-security-intelligence/a-peek-inside-a-pos-scammers-toolbox/

Created: 2026-02-23

Indicators

• domain - kitchentools.ru -
• domain - cyclingtools.ru -
• Mutex - aMD6qt7lWb1N3TNBSe4N -
• Mutex - Undsa8301nskal -
• domain - wetinulaf.com -
• domain - pop3smtp5imap2.com -
• domain - biketools.ru -
• Mutex - nuyhnJmkuTgD -
• YARA - c68fa54c6ffecefd3c39d8e788d48a986a8b533a -
• YARA - 31b4a93e7e9bf928741054927e504344de005c33 -
• Mutex - uyhnJmkuTgD -
• domain - stenfirthsta.com -

類似Pulses

• NitlovePOS: Another New POS Malware (score: 0.73)
• Attacking a POS Supply Chain (score: 0.73)
• "KUHOOK" POINT OF SALE MALWARE (score: 0.69)
• AbaddonPOS: A new point of sale threat linked to Vawtrak (score: 0.67)
• Targeted Crimeware in the Midst of Indiscriminate Activity (score: 0.67)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る