PunkeyPOS Malware

PunkeyPOS is a new type of Point of Sale Malware which was recently discovered by PandaLabs.^[1][2] This new Point of Sale Malware infects the Point of Sale(POS) Systems with two types of malware applications - keylogger and RAM Scraper. ^[3] PunkeyPOS gets installed into the computer automatically without the knowledge of the user, in a similar manner as other POS malware.

Process of Punkey Malware

The keylogger captures and records the keystrokes made at the POS terminals in the retail stores. It captures data only related to credit cards. The RAM Scraper reads the memory of the system processes in the POS terminals.^[4][5] The information in the magnetic strips on the cards gets stored in the POS terminal/ device memory and this stolen information is then encrypted and forwarded to the cybercriminal’s Control and Command Server (C&C). ^[6]

Data Breach Report

It has been reported by PandaLabs that about 200 retail stores that use POS systems have been infected with this new variant of PunkeyPOS malware.^[7]

See also

• Point-of-sale malware
• Cyber security standards
• List of cyber attack threat trends

References

1. "PandaLabs Discovers New POS Malware"
2. "New POS Malware Emerges - Punkey"
3. "New malware program Punkey targets point-of-sale systems"
4. "Punkey works via a keylogger and a memory scraper component"
5. "POS Malware Delivers Credit Card Theft at Hundreds of Restaurants"
6. "FBI Warns of New POS Malware"
7. "PunkyPOS Malware Dissected"