Trusted Design

MalumPoS: Targets Hotels and other US Industries

概要

TrendMicro first discovered MalumPoS, a new attack tool that threat actors can reconfigure to breach any PoS system they wish to target. Currently, it is designed to collect data from PoS systems running on Oracle® MICROS®, a platform popularly used in the hospitality, food and beverage, and retail industries. MalumPoS was designed to be configurable. This means that in the future, the threat actor can change or add other processes or targets. He can, for example, configure MalumPoS to include Radiant or NCR Counterpoint PoS systems to its target list. With that inclusion, companies running on those systems will also be at risk.

Created: 2026-02-23

Indicators

類似Pulses

このPulseに関連する脅威アクター (事実ベース)

APT41

Score: 7.98
Matched TTPs:
  • T1069 - Permission Groups Discovery
  • T1195.002 - Compromise Software Supply Chain
  • T1046 - Network Service Discovery
MITREへのリンク →

Scattered Spider

Score: 5.74
Matched TTPs:
  • T1069 - Permission Groups Discovery
  • T1588.001 - Malware
MITREへのリンク →

TA505

Score: 5.74
Matched TTPs:
  • T1069 - Permission Groups Discovery
  • T1588.001 - Malware
MITREへのリンク →

Volt Typhoon

Score: 11.92
Matched TTPs:
  • T1069 - Permission Groups Discovery
  • T1007 - System Service Discovery
  • T1057 - Process Discovery
  • T1046 - Network Service Discovery
  • T1680 - Local Storage Discovery
MITREへのリンク →

APT3

Score: 4.80
Matched TTPs:
  • T1069 - Permission Groups Discovery
  • T1057 - Process Discovery
MITREへのリンク →

FIN13

Score: 5.05
Matched TTPs:
  • T1069 - Permission Groups Discovery
  • T1046 - Network Service Discovery
MITREへのリンク →

TeamTNT

Score: 8.64
Matched TTPs:
  • T1007 - System Service Discovery
  • T1057 - Process Discovery
  • T1046 - Network Service Discovery
  • T1680 - Local Storage Discovery
MITREへのリンク →

OilRig

Score: 14.92
Matched TTPs:
  • T1007 - System Service Discovery
  • T1195 - Supply Chain Compromise
  • T1057 - Process Discovery
  • T1046 - Network Service Discovery
  • T1566.003 - Spearphishing via Service
  • T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol
MITREへのリンク →

Turla

Score: 8.90
Matched TTPs:
  • T1007 - System Service Discovery
  • T1588.001 - Malware
  • T1057 - Process Discovery
  • T1102.002 - Bidirectional Communication
MITREへのリンク →

Aquatic Panda

Score: 4.98
Matched TTPs:
  • T1007 - System Service Discovery
  • T1588.001 - Malware
MITREへのリンク →

Poseidon Group

Score: 4.04
Matched TTPs:
  • T1007 - System Service Discovery
  • T1057 - Process Discovery
MITREへのリンク →

Kimsuky

Score: 12.02
Matched TTPs:
  • T1007 - System Service Discovery
  • T1057 - Process Discovery
  • T1218.010 - Regsvr32
  • T1102.002 - Bidirectional Communication
  • T1680 - Local Storage Discovery
MITREへのリンク →

Chimera

Score: 8.64
Matched TTPs:
  • T1007 - System Service Discovery
  • T1057 - Process Discovery
  • T1046 - Network Service Discovery
  • T1680 - Local Storage Discovery
MITREへのリンク →

Ke3chang

Score: 4.04
Matched TTPs:
  • T1007 - System Service Discovery
  • T1057 - Process Discovery
MITREへのリンク →

Earth Lusca

Score: 6.50
Matched TTPs:
  • T1007 - System Service Discovery
  • T1588.001 - Malware
  • T1057 - Process Discovery
MITREへのリンク →

APT1

Score: 6.50
Matched TTPs:
  • T1007 - System Service Discovery
  • T1588.001 - Malware
  • T1057 - Process Discovery
MITREへのリンク →

Ember Bear

Score: 10.47
Matched TTPs:
  • T1195 - Supply Chain Compromise
  • T1588.001 - Malware
  • T1571 - Non-Standard Port
  • T1046 - Network Service Discovery
MITREへのリンク →

Sandworm Team

Score: 11.57
Matched TTPs:
  • T1195 - Supply Chain Compromise
  • T1571 - Non-Standard Port
  • T1195.002 - Compromise Software Supply Chain
  • T1102.002 - Bidirectional Communication
MITREへのリンク →

Medusa Group

Score: 11.04
Matched TTPs:
  • T1608.002 - Upload Tool
  • T1057 - Process Discovery
  • T1046 - Network Service Discovery
  • T1529 - System Shutdown/Reboot
MITREへのリンク →

Threat Group-3390

Score: 8.83
Matched TTPs:
  • T1608.002 - Upload Tool
  • T1195.002 - Compromise Software Supply Chain
  • T1046 - Network Service Discovery
MITREへのリンク →

UNC3886

Score: 3.98
Matched TTPs:
  • T1588.001 - Malware
  • T1057 - Process Discovery
MITREへのリンク →

Andariel

Score: 3.98
Matched TTPs:
  • T1588.001 - Malware
  • T1057 - Process Discovery
MITREへのリンク →

BackdoorDiplomacy

Score: 4.22
Matched TTPs:
  • T1588.001 - Malware
  • T1046 - Network Service Discovery
MITREへのリンク →

Windshift

Score: 4.04
Matched TTPs:
  • T1057 - Process Discovery
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

Tropic Trooper

Score: 6.12
Matched TTPs:
  • T1057 - Process Discovery
  • T1046 - Network Service Discovery
  • T1680 - Local Storage Discovery
MITREへのリンク →

Deep Panda

Score: 4.26
Matched TTPs:
  • T1057 - Process Discovery
  • T1218.010 - Regsvr32
MITREへのリンク →

APT28

Score: 3.92
Matched TTPs:
  • T1057 - Process Discovery
  • T1102.002 - Bidirectional Communication
MITREへのリンク →

Lazarus Group

Score: 23.94
Matched TTPs:
  • T1057 - Process Discovery
  • T1571 - Non-Standard Port
  • T1102.002 - Bidirectional Communication
  • T1046 - Network Service Discovery
  • T1027.007 - Dynamic API Resolution
  • T1680 - Local Storage Discovery
  • T1566.003 - Spearphishing via Service
  • T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol
  • T1529 - System Shutdown/Reboot
MITREへのリンク →

Storm-0501

Score: 4.26
Matched TTPs:
  • T1057 - Process Discovery
  • T1218.010 - Regsvr32
MITREへのリンク →

Mustang Panda

Score: 10.16
Matched TTPs:
  • T1057 - Process Discovery
  • T1046 - Network Service Discovery
  • T1027.007 - Dynamic API Resolution
  • T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol
MITREへのリンク →

ToddyCat

Score: 6.87
Matched TTPs:
  • T1057 - Process Discovery
  • T1680 - Local Storage Discovery
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

FIN7

Score: 9.24
Matched TTPs:
  • T1057 - Process Discovery
  • T1571 - Non-Standard Port
  • T1195.002 - Compromise Software Supply Chain
  • T1102.002 - Bidirectional Communication
MITREへのリンク →

MuddyWater

Score: 3.92
Matched TTPs:
  • T1057 - Process Discovery
  • T1102.002 - Bidirectional Communication
MITREへのリンク →

Rocke

Score: 5.68
Matched TTPs:
  • T1057 - Process Discovery
  • T1571 - Non-Standard Port
  • T1046 - Network Service Discovery
MITREへのリンク →

Magic Hound

Score: 10.60
Matched TTPs:
  • T1057 - Process Discovery
  • T1571 - Non-Standard Port
  • T1102.002 - Bidirectional Communication
  • T1046 - Network Service Discovery
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

APT37

Score: 7.54
Matched TTPs:
  • T1057 - Process Discovery
  • T1102.002 - Bidirectional Communication
  • T1529 - System Shutdown/Reboot
MITREへのリンク →

Higaisa

Score: 4.35
Matched TTPs:
  • T1057 - Process Discovery
  • T1680 - Local Storage Discovery
MITREへのリンク →

HEXANE

Score: 3.92
Matched TTPs:
  • T1057 - Process Discovery
  • T1102.002 - Bidirectional Communication
MITREへのリンク →

Inception

Score: 4.26
Matched TTPs:
  • T1057 - Process Discovery
  • T1218.010 - Regsvr32
MITREへのリンク →

Gamaredon Group

Score: 6.31
Matched TTPs:
  • T1057 - Process Discovery
  • T1571 - Non-Standard Port
  • T1102.002 - Bidirectional Communication
MITREへのリンク →

APT38

Score: 9.68
Matched TTPs:
  • T1057 - Process Discovery
  • T1036.006 - Space after Filename
  • T1529 - System Shutdown/Reboot
MITREへのリンク →

WIRTE

Score: 5.14
Matched TTPs:
  • T1571 - Non-Standard Port
  • T1218.010 - Regsvr32
MITREへのリンク →

Contagious Interview

Score: 7.67
Matched TTPs:
  • T1571 - Non-Standard Port
  • T1566.003 - Spearphishing via Service
  • T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol
MITREへのリンク →

APT32

Score: 9.66
Matched TTPs:
  • T1571 - Non-Standard Port
  • T1218.010 - Regsvr32
  • T1046 - Network Service Discovery
  • T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol
MITREへのリンク →

DarkVishnya

Score: 4.16
Matched TTPs:
  • T1571 - Non-Standard Port
  • T1046 - Network Service Discovery
MITREへのリンク →

APT33

Score: 5.14
Matched TTPs:
  • T1571 - Non-Standard Port
  • T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol
MITREへのリンク →

Cobalt Group

Score: 7.44
Matched TTPs:
  • T1218.010 - Regsvr32
  • T1195.002 - Compromise Software Supply Chain
  • T1046 - Network Service Discovery
MITREへのリンク →

Blue Mockingbird

Score: 7.28
Matched TTPs:
  • T1218.010 - Regsvr32
  • T1574.012 - COR_PROFILER
MITREへのリンク →

Moonstone Sleet

Score: 5.45
Matched TTPs:
  • T1195.002 - Compromise Software Supply Chain
  • T1566.003 - Spearphishing via Service
MITREへのリンク →

APT39

Score: 4.16
Matched TTPs:
  • T1102.002 - Bidirectional Communication
  • T1046 - Network Service Discovery
MITREへのリンク →

Equation

Score: 4.13
Matched TTPs:
  • T1564.005 - Hidden File System
MITREへのリンク →

Strider

Score: 4.13
Matched TTPs:
  • T1564.005 - Hidden File System
MITREへのリンク →

FIN6

Score: 7.03
Matched TTPs:
  • T1046 - Network Service Discovery
  • T1566.003 - Spearphishing via Service
  • T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol
MITREへのリンク →

Axiom

Score: 4.54
Matched TTPs:
  • T1001.002 - Steganography
MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Lazarus Group

Score: 0.80
Matched TTPs:
  • T1046 - Network Service Discovery
  • T1048.003 - Exfiltration Over Unencrypted Non-C2 Protocol
  • T1529 - System Shutdown/Reboot
  • T1571 - Non-Standard Port
  • T1680 - Local Storage Discovery
  • T1057 - Process Discovery
  • T1027.007 - Dynamic API Resolution
  • T1566.003 - Spearphishing via Service
  • T1102.002 - Bidirectional Communication
MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

← Pulse一覧に戻る