LockPOS
Description
(Cylance) LockPOS is a point-of-sale malware discovered in 2017 that is used to exfiltrate payment card data from targeted point-of-sale systems’ memory. The most recent version of LockPOS examined here changed its injection technique to drop the malware directly to the kernel to evade detection and bypass traditional antivirus (AV) hooks.
Names
| Name |
|---|
| LockPOS |
Category
Malware
Type
- POS malware
- Credential stealer
Information
- https://threatvector.cylance.com/en_us/home/threat-spotlight-lockpos-point-of-sale-malware.html
- https://www.arbornetworks.com/blog/asert/lockpos-joins-flock/
- https://www.cyberbit.com/new-lockpos-malware-injection-technique/
Malpedia
Alienvault Otx
Other Information
Uuid
d309aab8-3ff4-4f80-8d7f-a1834714fac9
Last Card Change
2020-05-24