Eric.freyssinet: Text replacement - "/ www." to "/ |Site=www."

2015-07-31T11:09:22Z

Text replacement - "/ www." to "/ |Site=www."

← Older revision		Revision as of 11:09, 31 July 2015
Line 1:		Line 1:
	{{Publication		{{Publication
	\|Link=http://www.hexacorn.com/blog/2012/12/19/malware-attacking-pos-systems/ www.hexacorn.com		\|Link=http://www.hexacorn.com/blog/2012/12/19/malware-attacking-pos-systems/
			\|Site=www.hexacorn.com
	\|Author=Adam Blaszczyk		\|Author=Adam Blaszczyk
	\|NomRevue=Hexacorn blog		\|NomRevue=Hexacorn blog

Eric.freyssinet: 1 revision imported

2015-02-07T14:29:18Z

1 revision imported

← Older revision		Revision as of 14:29, 7 February 2015
(No difference)

Eric.freyssinet at 12:01, 9 February 2013

2013-02-09T12:01:48Z

New page

{{Publication
|Link=http://www.hexacorn.com/blog/2012/12/19/malware-attacking-pos-systems/ www.hexacorn.com
|Author=Adam Blaszczyk
|NomRevue=Hexacorn blog
|Date=2012-12-19
|Editor=Hexacorn
|Year=2012
|Botnet=Dexter
|Abstract=Recently there has been quite a lot of technical posts about RAM scrappers targeting Point Of Sale (POS) systems i.e. malware stealing track data directly from memory of the systems involved in processing of credit cards within the Payment Card Industry (PCI). I am speaking – of course – about Dexter malware. You can find selected (good, technical and informative) articles covering this particular malware here: Verizon, Seculert, Volatility Labs, Trustwave.<br/> <br/>

It’s good to see that the actual samples are now being either shared publicly or at least discussions about their internals are becoming available for a public eye. Xylitol is definitely leading here as he has been talking about this topic and specific samples a few times this year (example here and here), and sporadically, some of the PFI companies write a blog or two, or present their findings on security conferences. One thing worth to mention here is that some ‘juicy’ knowledge about specific RAM scraping samples has been shared many times in the past, but it has never gained as much exposure as it probably should e.g. many hashes of RAM scrapers have been mentioned in public advisories from card schemes e.g. here, here, and here. Still, access to the actual samples is very limited plus the hashes of samples keep changing (they are often recompiled for each new compromise).
}}

Malware attacking POS systems - Revision history

Eric.freyssinet: Text replacement - "/ www." to "/ |Site=www."

Eric.freyssinet: 1 revision imported

Eric.freyssinet at 12:01, 9 February 2013