MITRE ATT&CKsoftware (malware)

S0169 RawPOS

Published 2018-01-16 Modified 2025-04-25 Official page ↗
Domain
enterprise
Platforms
Windows
Aliases
FIENDCRY, DUEBREW, DRIFTWOOD
Version
1.1
Created
2018-01-16

Description

RawPOS is a point-of-sale (POS) malware family that searches for cardholder data on victims. It has been in use since at least 2008. FireEye divides RawPOS into three components: FIENDCRY, DUEBREW, and DRIFTWOOD.

Related

Uses · MITRE ATT&CK (5)

  • T1074.001 Local Data Staging sub-technique
  • T1560.003 Archive via Custom Method sub-technique
  • T1036.004 Masquerade Task or Service sub-technique
  • T1543.003 Windows Service sub-technique
  • T1005 Data from Local System technique

Referenced by MITRE ATT&CK · uses (1)

References