ModPOS: Highly-Sophisticated, Stealthy Malware Targeting US POS Systems

显示全部楼层 · 发表于 2015-12-4 23:19:45

Today, iSIGHT Partners is sharing details about a highly sophisticated criminal malware framework that has been used to target point-of-sale (POS) systems at US-based retailers. We believe this very hard to detect malware is likely being used in broader campaigns and are disclosing details to help retailers and other organizations with POS and other payment processing systems hunt for and eradicate the malware.

http://www.isightpartners.com/2015/11/modpos/

http://yunpan.cn/c3FWhwbQEGbev （提取码：b55c）
密码 infected

显示全部楼层 · 发表于 2015-12-4 23:25:15

卡巴，剩一个

显示全部楼层 · 发表于 2015-12-4 23:27:11

BitDefender

处理后剩余

显示全部楼层 · 发表于 2015-12-4 23:32:44

BD
剩余这个文件

日志
[mw_shl_code=css,true]\malware.zip=>pos_bulk.zip=>pos_bulk/342fd917ca9aa40b6498fe662c6e03e4 Gen:Variant.Zusy.171130
\malware.zip=>pos_bulk.zip=>pos_bulk/F21403B6CF7516B37EFFC17F410CED6F Trojan.GenericKD.2880362
\malware.zip=>ModPos_droppers_2012.zip=>2aa35ae062f83248585b924dd668ed0a1a3089550a772900789b0feba1a923bb Gen:Variant.Zusy.8923
\malware.zip=>ModPos_droppers_2012.zip=>4739345d89db4d12e2f66f1bc2e7b41b8bb0c75eca0d2e4665983b45a4996213 Gen:Variant.Zusy.8923
\malware.zip=>ModPos_droppers_2012.zip=>6c9d748484021b2b7ee9722695432f73d0f5f2b5d7c19ffcc2bccaafe5d040b5 Gen:Variant.Zusy.8923
\malware.zip=>ModPos_droppers_2012.zip=>4e322d58013beff135c7fb4a8d8de94dac318af2204bb9824de908a0f04691c7 Gen:Variant.Zusy.8923
\malware.zip=>ModPos_droppers_2012.zip=>f4ea02f9e05bc86fb07eb67534612c1e1bc7761493386b773ff0f8a29f213287 Gen:Variant.Zusy.8923
\malware.zip=>pos_bulk.zip=>pos_bulk/a5dc57aea5f397c2313e127a6e01aa00 Trojan.Generic.11968115
\malware.zip=>pos_bulk.zip=>pos_bulk/94a83ffe8e9862b2791e28075f60d892 Gen:Variant.Zusy.80824
\malware.zip=>pos_bulk.zip=>pos_bulk/ABA833D11679DFEBC95060BD3C557853 Trojan.GenericKD.2880374
\malware.zip=>pos_bulk.zip=>pos_bulk/c86327222d873fb4e12900a5cadcb849 Trojan.Generic.8894474
\malware.zip=>pos_bulk.zip=>pos_bulk/F9C4E2D38DF8A87F545B6F5BA1F8691B Trojan.GenericKD.2880451
\malware.zip=>20048e58bb35370f9e54575221da9b6728d47e5eb5404cb30912fd99288f7d52.zip=>20048e58bb35370f9e54575221da9b6728d47e5eb5404cb30912fd99288f7d52 Trojan.GenericKD.2880451[/mw_shl_code]

显示全部楼层 · 发表于 2015-12-4 23:43:37

BAV云剩2个

显示全部楼层 · 发表于 2015-12-4 23:47:08

显示全部楼层 · 发表于 2015-12-5 08:51:36

GD KILL 13X

火绒 KILL 7X

显示全部楼层 · 发表于 2015-12-5 15:12:34

感谢楼主分享
已下载

显示全部楼层 · 发表于 2015-12-5 15:48:11

红伞剩一个

[可疑文件] ModPOS: Highly-Sophisticated, Stealthy Malware Targeting US POS Systems

评分

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块