FighterPOS

(Botnet) Link to the old Wiki page : [1] / Google search: [2]

FighterPOS
Alias	BRFighter
Group	Point-of-sale
Parent
Sibling
Family
Relations	Variants: Sibling of: Parent of: Distribution of: Campaigns:
Target	Brazil
Origin
Distribution vector
UserAgent
CCProtocol
Activity	2014 /
Status
Language
Programming language	Visual Basic 6
Operation/Working group

Introduction

Related to (code inspired from): vnLoader

Features

• DDoS

• Credit card data theft

• Memory scrapping

• Keylogger

Checksums / AV databases

• 0aea8f97ecbd4b9dbdae336f7310d35af8883bae | Virustotal

• 55fb03ce9b698d30d946018455ca2809 | Virustotal

• 55fb03ce9b698d30d946018455ca2809 | Virustotal

Publications

	Author	Editor	Year
FighterPOS: a new one-man PoS malware campaign	Trend Micro Forward-Looking Threat Research Team	Trend Micro	2015
One-man PoS malware operation captures 22,000 credit card details in Brazil		TrendLabs Security Intelligence Blog	2015