New FrameworkPOS variant exfiltrates data via DNS requests

MrBrian · Nov 5, 2014

From https://blog.gdatasoftware.com/blog...ariant-exfiltrates-data-via-dns-requests.html:

Between April and September 2014, the American retailer Home Depot was targeted by criminals who aimed to steal credit card information. The malware used during these attacks targets Point of Sale systems. Home Depot said that the cyber criminals stole 56 million of debit and credit card numbers from its customers.(1) G DATA SecurityLabs experts now discovered a new variant of this malware dubbed FrameworkPOS. Its main part is rather similar to the malware previously described by Trend Micro.(2) But the big difference is the way how stolen data is exfiltrated: the malware use DNS requests!
Click to expand...

Log in or Sign up

New FrameworkPOS variant exfiltrates data via DNS requests

MrBrian Registered Member

Log in or Sign up

New FrameworkPOS variant exfiltrates data via DNS requests

MrBrian Registered Member

Useful Searches