RatankbaPOS
Description
(Proofpoint) RatankbaPOS is deployed through a process injection dropper that is also capable of installing itself persistently, checking a C&C for either an update or a command to delete itself, dropping the RatankbaPOS implant to disk, and finally searching for the targeted POS process and module for injection and ultimately the theft of POS data.
Names
| Name |
|---|
| RatankbaPOS |
| RatabankaPOS |
Category
Malware
Type
- POS malware
- Backdoor
- Info stealer
Information
Malpedia
Other Information
Uuid
7e02c5a8-fe4e-4bdb-86c4-b5e47802a054
Last Card Change
2022-12-29