Trusted Design

FighterPOS Gets Worm Routine

概要

Last April 2015, Trend Micro talked about FighterPOS, a point-of-sale (PoS) malware that was used in a one-man cybercriminal operation to steal over 22,000 unique credit card numbers and affected more than 100 PoS terminals in Brazil and other countries. We recently came across new and seemingly improved versions of this malware. Among other things, FighterPOS now has propagation capabilities; meaning, it could spread from one PoS malware terminal to another that is connected to the same network and thereby increasing the number of potential victims in one organization. Source : http://blog.trendmicro.com/trendlabs-security-intelligence/fighterpos-gets-worm-routine/

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

FighterPOS (score: 0.73)
20160226A: FighterPOS Gets Worm Routine (score: 0.71)
FighterPOS – DIY Malware (score: 0.67)
NitlovePOS: Another New POS Malware (score: 0.67)
FRAMEWORKPOS MALWARE CAMPAIGN NABS ~43,000 CREDIT CARDS (score: 0.62)

このPulseに関連する脅威アクター (事実ベース)

Ember Bear

Score: 11.91

Matched TTPs:

T1491.002 - External Defacement
T1195 - Supply Chain Compromise
T1190 - Exploit Public-Facing Application
T1588.001 - Malware

MITREへのリンク →

Sandworm Team

Score: 16.00

Matched TTPs:

T1491.002 - External Defacement
T1195 - Supply Chain Compromise
T1190 - Exploit Public-Facing Application
T1584.005 - Botnet
T1195.002 - Compromise Software Supply Chain

MITREへのリンク →

Mustard Tempest

Score: 4.54

Matched TTPs:

T1583.008 - Malvertising

MITREへのリンク →

OilRig

Score: 10.62

Matched TTPs:

T1025 - Data from Removable Media
T1195 - Supply Chain Compromise
T1588.003 - Code Signing Certificates

MITREへのリンク →

Gamaredon Group

Score: 8.16

Matched TTPs:

T1025 - Data from Removable Media
T1001 - Data Obfuscation

MITREへのリンク →

APT28

Score: 13.76

Matched TTPs:

T1025 - Data from Removable Media
T1190 - Exploit Public-Facing Application
T1669 - Wi-Fi Networks
T1211 - Exploitation for Defense Evasion

MITREへのリンク →

Turla

Score: 6.08

Matched TTPs:

T1025 - Data from Removable Media
T1588.001 - Malware

MITREへのリンク →

Threat Group-3390

Score: 7.55

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1195.002 - Compromise Software Supply Chain
T1588.003 - Code Signing Certificates

MITREへのリンク →

FIN7

Score: 4.40

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1195.002 - Compromise Software Supply Chain

MITREへのリンク →

Volt Typhoon

Score: 8.38

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1217 - Browser Information Discovery
T1584.005 - Botnet

MITREへのリンク →

Kimsuky

Score: 12.09

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1111 - Multi-Factor Authentication Interception
T1588.003 - Code Signing Certificates
T1587 - Develop Capabilities

MITREへのリンク →

BackdoorDiplomacy

Score: 3.93

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1588.001 - Malware

MITREへのリンク →

GOLD SOUTHFIELD

Score: 4.40

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1195.002 - Compromise Software Supply Chain

MITREへのリンク →

BlackTech

Score: 4.62

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1588.003 - Code Signing Certificates

MITREへのリンク →

Medusa Group

Score: 6.01

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1650 - Acquire Access

MITREへのリンク →

Fox Kitten

Score: 4.76

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1217 - Browser Information Discovery

MITREへのリンク →

Earth Lusca

Score: 3.93

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1588.001 - Malware

MITREへのリンク →

APT29

Score: 6.01

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1090.004 - Domain Fronting

MITREへのリンク →

UNC3886

Score: 3.93

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1588.001 - Malware

MITREへのリンク →

Dragonfly

Score: 4.40

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1195.002 - Compromise Software Supply Chain

MITREへのリンク →

Axiom

Score: 9.63

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1584.005 - Botnet
T1001.002 - Steganography

MITREへのリンク →

APT41

Score: 4.40

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1195.002 - Compromise Software Supply Chain

MITREへのリンク →

HAFNIUM

Score: 5.09

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1584.005 - Botnet

MITREへのリンク →

APT38

Score: 3.29

Matched TTPs:

T1217 - Browser Information Discovery

MITREへのリンク →

Scattered Spider

Score: 5.74

Matched TTPs:

T1217 - Browser Information Discovery
T1588.001 - Malware

MITREへのリンク →

Moonstone Sleet

Score: 10.06

Matched TTPs:

T1217 - Browser Information Discovery
T1195.002 - Compromise Software Supply Chain
T1587 - Develop Capabilities

MITREへのリンク →

Chimera

Score: 6.91

Matched TTPs:

T1217 - Browser Information Discovery
T1111 - Multi-Factor Authentication Interception

MITREへのリンク →

LAPSUS$

Score: 6.08

Matched TTPs:

T1588.001 - Malware
T1111 - Multi-Factor Authentication Interception

MITREへのリンク →

APT42

Score: 3.62

Matched TTPs:

T1111 - Multi-Factor Authentication Interception

MITREへのリンク →

Equation

Score: 4.13

Matched TTPs:

T1564.005 - Hidden File System

MITREへのリンク →

Strider

Score: 4.13

Matched TTPs:

T1564.005 - Hidden File System

MITREへのリンク →

Wizard Spider

Score: 3.15

Matched TTPs:

T1588.003 - Code Signing Certificates

MITREへのリンク →

FIN8

Score: 3.15

Matched TTPs:

T1588.003 - Code Signing Certificates

MITREへのリンク →

Mustang Panda

Score: 7.28

Matched TTPs:

T1588.003 - Code Signing Certificates
T1027.007 - Dynamic API Resolution

MITREへのリンク →

Lazarus Group

Score: 4.13

Matched TTPs:

T1027.007 - Dynamic API Resolution

MITREへのリンク →

Contagious Interview

Score: 3.84

Matched TTPs:

T1587 - Develop Capabilities

MITREへのリンク →

Velvet Ant

Score: 4.13

Matched TTPs:

T1211 - Exploitation for Defense Evasion

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Sandworm Team

Score: 0.83

Matched TTPs:

T1491.002 - External Defacement
T1190 - Exploit Public-Facing Application
T1195 - Supply Chain Compromise
T1195.002 - Compromise Software Supply Chain
T1584.005 - Botnet

MITREへのリンク →

APT28

Score: 0.73

Matched TTPs:

T1025 - Data from Removable Media
T1190 - Exploit Public-Facing Application
T1669 - Wi-Fi Networks
T1211 - Exploitation for Defense Evasion

MITREへのリンク →

Kimsuky

Score: 0.64

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1587 - Develop Capabilities
T1588.003 - Code Signing Certificates
T1111 - Multi-Factor Authentication Interception

MITREへのリンク →

Ember Bear

Score: 0.62

Matched TTPs:

T1190 - Exploit Public-Facing Application
T1195 - Supply Chain Compromise
T1491.002 - External Defacement
T1588.001 - Malware

MITREへのリンク →

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る