Reddit NetSec

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

CIRCL OSINT Feed

ThreatFox MISP Feed

CVE Database V5

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

2019-12-10: TrickBot Project â€œAnchor:â€ Window Into Sophisticated Operation

The TrickBot malware is a well-known banking Trojan that has evolved into a sophisticated modular malware platform used primarily for financial theft and espionage. The referenced 'Anchor' project appears to be a component or module within the TrickBot operation, described as a 'memory scraper.' Memory scrapers are designed to extract sensitive data such as credentials, session tokens, and other confidential information directly from the memory of infected systems. TrickBot's modular architecture allows it to deploy various payloads tailored to specific objectives, including lateral movement, data exfiltration, and persistence. The 'Anchor' module likely contributes to these capabilities by harvesting credentials from memory, facilitating further compromise and enabling attackers to bypass traditional security controls that rely on stored credentials or network traffic inspection. The information provided indicates a medium severity threat level with a moderate certainty (50%), and no known exploits in the wild at the time of reporting. The lack of specific affected versions or patch information suggests that this is an intelligence report on the malware's capabilities rather than a vulnerability in a particular product. TrickBot's continuous evolution and use in targeted campaigns make it a persistent threat, especially in environments where banking and financial data are processed.

Detailed information about 2019-12-10: TrickBot Project â€œAnchor:â€ Window Into Sophisticated Operation. Get real-time updates, technical details, and mitigat

2019-12-10: TrickBot Project â€œAnchor:â€ Window Into Sophisticated Operation - Live Threat Intelligence - Threat Radar | OffSeq.com

2019-07-18: Newer "PoSeidon" aka "FindPOS" aka "FindStr" 15.10 Point-of-Sale Malware

The PoSeidon malware, also known as FindPOS or FindStr, is a point-of-sale (POS) malware variant identified in version 15.10 and reported in mid-2019. This malware targets POS systems, which are critical components in retail and hospitality sectors for processing payment card transactions. PoSeidon operates primarily as a memory scraper, designed to extract sensitive payment card data directly from the memory of POS terminals during transaction processing. Additionally, it incorporates keylogging capabilities to capture user input, potentially harvesting credentials or other sensitive information entered via the keyboard. The malware is notable for being signed with a certificate issued by Thawte under the entity Lingarder Limited, which may help it evade some security detections by appearing as legitimate software. Despite its capabilities, there are no known exploits in the wild reported for this specific version, and the threat level is assessed as medium. The malware’s operation involves raw input capture and memory scraping, techniques that allow it to bypass some traditional file-based detection methods. The lack of specific affected versions and patches suggests that PoSeidon targets a range of POS systems without a particular vendor or software version focus, making it a generic threat to POS environments. The information is sourced from CIRCL and cataloged in malpedia, with an OSINT certainty rating of 50%, indicating moderate confidence in the data. Overall, PoSeidon represents a persistent threat to POS infrastructure by compromising payment card data confidentiality and potentially enabling financial fraud through stolen cardholder information.

Detailed information about 2019-07-18: Newer "PoSeidon" aka "FindPOS" aka "FindStr" 15.10 Point-of-Sale Malware. Get real-time updates, technical details, and m

Title	Severity	Type	Source	Date

Threats Tagged 'memory scraper'

Filter Threats

Threats Tagged 'memory scraper'

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility