<?xml version="1.0"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
	<id>https://www.botnets.fr/index.php?action=history&amp;feed=atom&amp;title=NitlovePOS%3A_another_new_POS_malware</id>
	<title>NitlovePOS: another new POS malware - Revision history</title>
	<link rel="self" type="application/atom+xml" href="https://www.botnets.fr/index.php?action=history&amp;feed=atom&amp;title=NitlovePOS%3A_another_new_POS_malware"/>
	<link rel="alternate" type="text/html" href="https://www.botnets.fr/index.php?title=NitlovePOS:_another_new_POS_malware&amp;action=history"/>
	<updated>2026-10-24T00:00:33Z</updated>
	<subtitle>Revision history for this page on the wiki</subtitle>
	<generator>MediaWiki 1.43.11</generator>
	<entry>
		<id>https://www.botnets.fr/index.php?title=NitlovePOS:_another_new_POS_malware&amp;diff=3514&amp;oldid=prev</id>
		<title>Eric.freyssinet: Created page with &quot;{{Publication |Botnet=NitlovePOS, |Vector=Spam, |Year=2015 |Date=2015-05-23 |Editor=FireEye |Link=https://www.fireeye.com/blog/threat-research/2015/05/nitlovepos_another.html...&quot;</title>
		<link rel="alternate" type="text/html" href="https://www.botnets.fr/index.php?title=NitlovePOS:_another_new_POS_malware&amp;diff=3514&amp;oldid=prev"/>
		<updated>2015-05-24T11:59:27Z</updated>

		<summary type="html">&lt;p&gt;Created page with &amp;quot;{{Publication |Botnet=NitlovePOS, |Vector=Spam, |Year=2015 |Date=2015-05-23 |Editor=FireEye |Link=https://www.fireeye.com/blog/threat-research/2015/05/nitlovepos_another.html...&amp;quot;&lt;/p&gt;
&lt;p&gt;&lt;b&gt;New page&lt;/b&gt;&lt;/p&gt;&lt;div&gt;{{Publication&lt;br /&gt;
|Botnet=NitlovePOS,&lt;br /&gt;
|Vector=Spam,&lt;br /&gt;
|Year=2015&lt;br /&gt;
|Date=2015-05-23&lt;br /&gt;
|Editor=FireEye&lt;br /&gt;
|Link=https://www.fireeye.com/blog/threat-research/2015/05/nitlovepos_another.html&lt;br /&gt;
|Author=Nart Villeneuve, Daniel Regalado,&lt;br /&gt;
|Type=Blogpost&lt;br /&gt;
|Abstract=The NitlovePOS malware can capture and ex-filtrate track one and track two payment card data by scanning the running processes of a compromised machine. It then sends this data to a webserver using SSL.&lt;br /&gt;
&lt;br /&gt;
We believe the cybercriminals assess the hosts compromised via indiscriminate spam campaigns and instruct specific victims to download the POS malware.&lt;br /&gt;
}}&lt;/div&gt;</summary>
		<author><name>Eric.freyssinet</name></author>
	</entry>
</feed>