MITRE ATT&CKsoftware (malware)
S0517 Pillowmint
- Domain
- enterprise
- Platforms
- Windows
- Version
- 1.2
- Created
- 2020-07-27
Description
Pillowmint is a point-of-sale malware used by FIN7 designed to capture credit card information.
Related
Uses · MITRE ATT&CK (15)
- T1027.015 Compression sub-technique
- T1027.011 Fileless Storage sub-technique
- T1070.009 Clear Persistence sub-technique
- T1059.001 PowerShell sub-technique
- T1560 Archive Collected Data technique
- T1070.004 File Deletion sub-technique
- T1546.011 Application Shimming sub-technique
- T1055.004 Asynchronous Procedure Call sub-technique
- T1140 Deobfuscate/Decode Files or Information technique
- T1005 Data from Local System technique
- T1012 Query Registry technique
- T1027 Obfuscated Files or Information technique
- T1057 Process Discovery technique
- T1106 Native API technique
- T1112 Modify Registry technique
Referenced by MITRE ATT&CK · uses (1)
- G0046 FIN7 group
References
- https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/pillowmint-fin7s-monkey-thief/ Trustwave Pillowmint June 2020