Tiny POS USES Memory scraping
The card-scraping malware scraped payment-card data from memory.
Explicit Confidence 99% · Courtney Dayter EP 15 Details
“The way that they were scraping cards were – they were scraping from memory.”
Technique
technique:memory_scraping
Also: RAM scraping, scraping from memory
Technique used by the malware to search process memory for payment-card numbers and expiration data.
Technique used by the malware to search process memory for payment-card numbers and expiration data.
“The malware sits on these systems, scrapes all this data out of memory”
“they were scraping from memory”
Searching process memory for unencrypted payment-card data while the point-of-sale software is processing it.
“Cam used a debugger to search the RAM, looking for strings that matched Luhn’s algorithm”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Tiny POS | Explicit | 15 |
| incoming | USES | Cameron Harrison | Explicit | 85 |
Tiny POS USES Memory scraping
The card-scraping malware scraped payment-card data from memory.
Explicit Confidence 99% · Courtney Dayter EP 15 Details
“The way that they were scraping cards were – they were scraping from memory.”
Cameron Harrison USES Memory scraping
Cam searched the RAM of point-of-sale computers for payment-card data matching Luhn’s algorithm.
Explicit Confidence 99% · Cameron Harrison EP 85 Details
“set up your rerun, the point of sale software, and a debugger, so that way they can get – scan through the memory address ranges”