Backoff

Backoff Malware

Backoff is a kind of malware that targets point of sale (POS) systems.^[1][2] It is used to steal credit card data from Point of Sale machines at retail stores.^[3] Cybercriminals use Backoff to gather data from credit cards. It is installed via remote desktop type applications where POS systems are configured.^[4] It belongs to the POS Malware family as it is known to scrape the memory of POS devices.^[5][6]

Operation

Backoff malware injects the malicious stub into the explorer.exe file to gain access to the POS machines and it scrapes the victim's machine memory from running the processes.^[7] Cybercriminals have mutated different variants of Backoff while some of the variants are equipped with keylogging functionality.^[8] Some of the Backoff variants have C2 component which helps the malware to upload the victim's personal data, download the malware onto the victim POS machine and to uninstall the malware.^[9]

See also

• Cyber electronic warfare
• Cyber security standards
• Cyber warfare
• List of cyber attack threat trends
• Proactive Cyber Defence

References

1. "About Backoff Malware". Retrieved 2014-07-31.
2. "Backoff Malware complete overview". Retrieved 2014-07-31.
3. "Backoff malware hits credit card machines". Retrieved 2014-08-26.
4. "Backoff Malware used by Cybercriminals".
5. "Backoff malware-WHAT IS IT?". Retrieved 2014-08-26.
6. "Memory Scrapping malware – Biggest Threat To the Retail" (PDF). Retrieved 2014-01-03.
7. "Know About Point of Sale Malware". Retrieved 2014-09-08.
8. "Backoff Malware Variants". Retrieved 2014-11-03.
9. "Functionality of Backoff Malware". Retrieved 2015-04-06.