ModPos Bwack Fwiday Malware Burunduruuuu.

dbit

http://www.theregister.co.uk/2015/11/24/modpos_point_of_sale_malware/

An the bits that hurt the most :-

The encryption used for network and command and control data exfiltration and communication is protected with 128 bit and 256 bit encryption, with the latter requiring a new private key for each customer.
This makes it much more difficult to know what data is being stolen, unlike other sales register malware that slurp details in cleartext.

"We will see disclosures and compromises in the future that point back to this framework.”


And the ouchie bit :-
He says the attack group will need to change parts of its codebase to re-gain some of its now lost obfuscation, but adds that some changes will be much harder to implement than others.

Hotblack Desiato

Another random thought, another thread?

dbit

LOLS ha ha ha .

Khannie

Hotblack Desiato wrote: »

Another random thought, another thread?

OP is on topic for the forum. Your post is not.