FrameworkPOS

Malware & Tools · FrameworkPOS

· MalwareS0503 · Zararlı Yazılım

Type

malware

Techniques

Used By

1 groups

Platforms

—

Description

FrameworkPOS is a point of sale (POS) malware used by FIN6 to steal payment card data from sytems that run physical POS devices.(Citation: SentinelOne FrameworkPOS September 2019)

Tactic Coverage

collection (3)exfiltration (1)discovery (1)

Used By (1 groups)

G0037FIN6Magecart Group 6, ITG08

Techniques (5)

T1005Data from Local System

collection

T1048Exfiltration Over Alternative Protocol

exfiltration

T1057Process Discovery

discovery

T1074.001Local Data Staging

collection

T1560.003Archive via Custom Method

collection

References

https://attack.mitre.org/software/S0503 https://labs.sentinelone.com/fin6-frameworkpos-point-of-sale-malware-analysis-internals-2/