Rewterz Threat Advisory – CVE-2019-1867 Cisco Elastic Services Controller REST API Authentication Bypass Vulnerability
May 8, 2019Rewterz Threat Alert – Turla LightNeuron Backdoor Targeting Microsoft Exchange Mail Servers Using Steganography
May 9, 2019Severity
Medium
Analysis Summary
In the Swipe-and-Sign authentication option for card-present transactions, attacks by POS malware like TinyPOS have been discovered.
Some techniques used by these campaigns in the process of Data Exfiltration were identified as follows:
- Call / Push obfuscation
- Fake API calls
- Junk instructions
- Imports by hash
- Icon resource randomization
- VS_VERSION_INFO randomization
- Dynamic loading of all imported API functions
- Simple encryption layer added after compilation
- The malware is delivered as an additional payload alongside well-known banking Trojan families such as Emotet or IcedID.
A number of associated Indicators of Compromise are given below.
Impact
- Credit Card Scam
- Financial Loss
Indicators of Compromise
IP(s) / Hostname(s)
- 85[.]93[.]5[.]136
- 91[.]197[.]232[.]26
- 95[.]154[.]199[.]104
- 85[.]93[.]20[.]42
- 77[.]72[.]84[.]115
- 62[.]210[.]36[.]112
- 5[.]8[.]18[.]222
- 46[.]161[.]40[.]145
- 31[.]184[.]234[.]108
- 23[.]228[.]232[.]92
- 199[.]165[.]16[.]165
- 194[.]165[.]16[.]199
- 194[.]165[.]16[.]166
- 194[.]165[.]16[.]165
- 193[.]28[.]179[.]200
- 193[.]142[.]30[.]201
- 188[.]126[.]77[.]137
- 185[.]248[.]100[.]188
- 185[.]183[.]160[.]137
- 185[.]174[.]102[.]20
- 179[.]43[.]147[.]209
Malware Hash (MD5/SHA1/SH256)
- 00a46a475d56b0e56e0522d6736330935aa64984
- 028742c5c6b3deefde295ed9ecf95fa98c04dd4c
- 02968031a3afbd3447449e118f6e89f49853e5cf
- 031c3db8e0490a4379571bae2845742897b744b4
- 048252f13ec38b88df0ac00a3afef6f3226e0718
- 0486218f663b18db97d47ac5c10cbe16caf29ffe
- 051286924a39d9c100c131f7d48600d20d465cb7
- 0626ab3fe9156b44e07b9c4c1a86516021ec4ae8
- 09689a26b45f5a7339d327557f3827ac229d8c20
- 0a76fa8dac5ff5d6420cf1c75f2823e502c3ecf0
- 0ab364bd8b6a3b88594012c130fd473bdb3ee6ef
- 0c28d29d57ff72df7b3ad1042d14dcb9a1c16d90
- 0e30d6dfec2b296c5d40baab2f88266e239cc4bc
- 0e7cef887e54962ee4d5dd810b95030b7623b870
- 0f438238665eb82b756acf1ec7e566b7909b4960
- 109f9e62014e14c5c9605c1f01d0603e26a915bd
- 1106c05734faf7c316bc3cd766664d54b87f604c
- 115eaef370396843a9e28215b7267ec9559f45f3
- 121a259fdce337ea7cb1e7499a0ce7a797721c5c
- 126b62a33bc8598f0e4c58c3b2bc657e2b3375b2
- 132cf9d6db8dd64786568d445ce8b650d6f406a7
- 13834ad9ac1833c83521755b09074b38f9033236
- 15e8c23c989ebf7df86f831b4c400abdde9f631b
- 16634b627e38c076a5423d2164b1a594587f9a9c
- 16dd2043503d8b68075362095214f7fbdbb28a13
- 17722edacb2d367391eb41d09d79e3356d225cf7
- 17a8ea843d8e0fb929e637d3e6f1ad26b8982347
- 1820082cdcc7665d07a169ba33d0dd6105bde422
- 1982eaf61effd0229f272846a7728406482ba3bf
- 1a445c92b2bfd5480525c075ec577609d1af7ca1
- 1ad1019b1463216bde562ab1a60c877b8da4d7f5
- 1b7fc7aaaca65c0c12222ac51e7f02f198266b07
- 1ce7c92db916b73e3182f17670b7d550cb76718c
- 1d5ce7d15643646a28ab148691c18047cf8fb9ee
- 1d9e2bb347b6d0a0b341926a603c8f0daf25bf09
- 1de5d87aa3f4410a18157ce2bf8d37685e908798
- 1e63aaaa4eb4ba61b48caa642e7743745ff81c89
- 1ecb9b3124cc4b51afda45fe732ef1243b39a8c9
- 1f4c0ac87218c12cfd02e856a8e7a61027dd5e10
- 1f98c55b57036ffac6fa08c0cef3cfe54a5a6dad
- 207ff0f630e430d25c788ea6d4ea3bbacfeb33d9
- 20a4820dd61e5d3115630162ac19f630a688198b
- 215ed11523ea6a4d918acb09559823a337b62834
- 2177ba22e9724f7826ff8511663e28a1c29232c2
- 23f3dfe9d07e82da22f7f597ae59a20f3e0bb0a2
- 25cf7e8c92fb13a96108aaa596adb228117f8765
- 26389a6904b29dbbb90e20825eaec7e2f55b59b4
- 268f6d661c5c51053161768cbadf38930b56cf09
- 26bdfe45a89956686cae31f9c02d1cd54de486b1
- 276660481dc2655e8b15cbd4de2007866e77b463
- 282b6e6cff447ccd0525e9074f8b68f8060c640e
- 28522dab2b86976460d60891eae13a8013a2eb5a
- 291eae72a8e461fb3165be87f75e51fae7384b1f
- 29bd8b56bcdb53b13a264bdcd76150ff41756645
- 2a21258b6954f66d8c29d59e5430b0e139fffc57
- 2afef3be6fb9348ce4876f5d1d726b90685d5a91
- 2b8f7f7b6af03dcdead6430e26c3dcd3206be497
- 2ba124738f1bcf27bb2a598307309e7485cccb46
- 2bb5236ce95c1e8db044520866532c559c685cac
- 2c0fa9ba6152e0e6ea5f80657bfe1898c021b633
- 2d1d69a09985b0572a1bfcb04f1a647370592511
- 2f486bf55b43aa39e0a64ec0295d715232a85607
- 2f791f72e4965454c3e4bdeecb9c22caf0e5c14a
- 31bca61b30feaf4f3d8505ba9ffd54e2a5d1ac25
- 322e95fcff92ac692c32367caccb89bffbf3556b
- 32837616c06390831aa9a73f314819bacfa94db9
- 342f66035ed3485a3941992b7538410928cafbf3
- 3500a97643488ffb5d21339f621b85169b0c7fad
- 3511a6d3bb94a59dd776f66a9fcdc8115707355c
- 35676293efca634603cf3e3ef65961ff92e78199
- 35c68b24cb9118362233a9cd9071e78071f40b1f
- 35f4a8d1574b3e86fea210f15d1961f4609e8835
- 367df6425eb316f98a10f6ca112fe65fded46771
- 383c047e591e1d78ff392e1aa8b8fbedd8a9bbaa
- 39273383aaf7e8e355f81fd8318a4b0306fc9573
- 396c93b9d3c5819b0cae2a9c6e33c2f61e6e095d
- 399b17b3228a9c91e3752b643c5f043807002865
- 39c2b5c090308cb685fc0a93c9faacca180282e5
- 39d2e84f372a89a07bb84868b8b5da3b00ebc6ce
- 3a6d174040d43f7b874043d37aca81087b0bcf80
- 3af3e9e3b20cbe50611aba51fe8c451ec2b61937
- 3baad1b48006826cf135eee51eab0dc793d5d35a
- 3ca213bb8c0ccf163708888eb47f22cb58dc8466
- 3f3814a5a235b597d79070df6a4a746422fbbe39
- 3f64a3910ed8a4e33c115438ed455d9de5ffde40
- 3fe5815f51ed1b093c1a1c274420123298307c66
- 4176bc6932eac200c079f0d4bebbcb469344b301
- 41c9f1e2853e550ec2bb64efc40a553abec0365e
- 440eae6bcfe4830f31531e61dc309ebd30ca0df7
- 4462dc30538a9d12c84c6b3b014dea1a3811370e
- 44854f7a8f4ae2c2c46d8a008b0988e515bc588d
- 44fb9ad80107e143bc14b62f367fde40075e8a99
- 45e240ace247c55010ba75c3bcfa768884d83e46
- 45fcdb1d97efb3786d6c3e0bf50fa700aa423e3e
- 46e86b75ece45cb8e9176a7b8b7213b27d0e3ddd
- 46ff0cca7f6f381d4065280451a37d45287a4442
- 483bfe2af5ea94d98f050f8b768f3cd9f207fafa
- 4857eee40e0e14cb3e5173e37e1f728386caf947
- 497b114ab46868bd35e969fcff2ab92a639578d9
- 498c12a2c00fbdf22954d9b06737ae4e5a48c68b
- 4cc3438cadab604b3df3a25a129a1b354b6aaa25
- 4d17bdb94e2999cdf8f81d2689489d4269896ff4
- 4d181a749cea2fd82aa80f319336b08b8b961e6e
- 4e829b18cbc08a03a08812c15385dce479f4fb91
- 5021a421a93d0550b89cf3d547232b34bf1b4b93
- 503ed181b3f1015cb18adf2687e36d9a4ba00a95
- 50a03cbac2c99b2549e178ddfa7a4a9f6dbd89ec
- 523923a402e468185614888ae65e1dd7df314e47
- 524272ff65275f9a79376446b8d984cebd76c559
- 530c31c9e389d0573498a6d5e95d1f221ae84199
- 531f5cd44f6363096aa162bb4edc1a0a4b6f3bf6
- 537df154deebafdc269d056994fde2100feec1c1
- 565704b49f7a60c92c5830039f0116fff48802b9
- 56ae1c8692e21ac9fece691b0e502667b649b187
- 56f4a37fecb47aecb27c46ff5e5f7a26bd0e4cc6
- 5725bce50fb1dfb92b67eb831a0ac4fb41df2cba
- 5739738ab6180c11343a55356a1c3600430ad3f7
- 586ebce580be8386cf2c755ace71f4e5d92cfac9
- 58a6a7da1e7d9fc96773681c33ea8634b212b178
- 591201f141e82a78245e46e4c54a5cdd531a8252
- 5917b72c2e3cd20990036ac5a31e7c62d041afe1
- 59a6a19eb128e9fdcb90bdfeb6bffdc2798e1c8c
- 5a45ca9d44980dd32b7cd7dd08c4f6faa33caeee
- 5a469fbc9c235c6fe2460e811f00db4e93eebc72
- 5a51240b178631909bb82900f09121013f72c0e3
- 5afaa637a7451fa49394942d6680c92c363e8b95
- 5b97df8ec4f0fa24287a70f487be974e4905a118
- 5bed33f29ee823c742100dabe5754fbe32521ea8
- 5c4ec897c48dfbfe5282ce514ab8380734d2cb67
- 5e6b1e562f93111a140ce56933c708640104bd37
- 5e7d26565f0131b285404065caf600f8464a45b5
- 5eb5d3cd7861eb5dcd71732a20ee1b151f23d225
- 5fb2d5015d56837adb2e899c264e86905f26da45
- 6053ab3ba74314f5c8fe6be8ed254ef8edbaf725
- 63131ea6923a5b0db809937786b18a82e3ed9e29
- 664d3ee0df4e213579562f38bf19e781ec5fefc5
- 667ab38c032f797c29a107e421157514aa7a94cc
- 66a008091f01824b72c4619ec75fddc9064bf695
- 6741386a9ee83ccf5cd169e0200b60d0677a05b7
- 676235d4ed5c7083f657afa10b82a81c2e1856fe
- 67db6a595d3c8c93a996d9cc5cf309f286d7b617
- 67f2c8d5d53070d521f92e7a757fd5be8a0cabea
- 691d5924c02002fef954dfc2fead1ff50f8165a2
- 6a5eca33e5fe702ff4fe3eb47a7b42c85b1473ae
- 6afbd9981837b43866dd89235081b0a138f8ceea
- 6c28d0ebe7ca0dedaa6b67564f5b9d5493927d6a
- 6e1487e033c5a159c1a0a7a43609bc5856daebe3
- 6ebdc1e92b7dd5e28c100e425acd9d23f7232757
- 6f6a741d12774655b5bb5f1833be8dae5e170b19
- 706f9455df5211a55e25ae9cf982c79fad6f1f90
- 7086e191d7c478fb679820bbadce2e08898b656e
- 710e917f28e5fd4170b8bf58b48b26329fc1556c
- 72861b46616b5bbb9fc11177e756787014f610b4
- 7395f1affe5a062f211364b931b6778cdfb43bb4
- 7439ee6de5e2497f6db727a7d1d80bc36da7ad71
- 747d01d72f06cd29633368b5dc0c35eea0ccf3d2
- 74e6dc09a0761f9d4475cd9af1663e4253f7d953
- 7538d911be0ecd29def2cdec01b04df64dc4991c
- 75e0d61c8727f038ae15f92aaa73698463fabf50
- 762bd51d78656f8a4aa50293c022fa820f81e061
- 76564900336d348795fc42d9d1730b3a7257c676
- 7719cd1cf007906e22b1028fe5ee65440eec3d33
- 783dd0ad9a4529ba4fa0f766ea08de31409dfdcf
- 784679bf4c7bae78c1beac61a227b7cc59d4a87a
- 7a4034c9442237a93e60449c67147b48ae4b3bea
- 7b512322846addd41679800f830ae32c62cd9e32
- 7ba56e784a37f0f9a41cff839d53d4e3ac0318d9
- 7bf0e15930f5733f276207f826d37a351824b75a
- 7d9cbd2cb52af63ab432f178080089696316a5c7
- 7e5344b14d24291f43c19f6acb1eac68899fb6bd
- 7ebc1745c5f0a6ae42bd287706f01f6db2792ccb
- 7edbaac22f3994cca2d93dafc4a2b4ceb8a68369
- 805159f8a46dde2eb8bb257c0b5bf50711d06a2c
- 807f31118ec53683a7979a322ae56d9839314903
- 8104a7829603615c588107de341c698328a5baf6
- 810bc5db51ee4d91d8e84dab97dad56875bdb91b
- 814dd9a259426f8f31b8814689bacc0bb67702f2
- 818eb0eed3b4a2ddcbe267b3f3f9c7973f042f8d
- 82549c8968be98ef8e675245ef40b464f1dd6078
- 83a0f1c40911d972d79173f87aeabbeb5429eff4
- 83c2f1bbb94139a9a6028ea2f4e6d8aa39aa1d61
- 8525776fca90791e1d917fdee3c5735da79b8af0
- 854c49377d06b247f376375b55b03d62e33d3064
- 858d80f99c57a097a8d3b6af06abce058cf724cd
- 860060d72ce8f0a1030110586d7b5db6d2bb8036
- 875f7cd53209d38552bd1bfa769a633439bd2db5
- 87facc604f5733f11f4a7951e837c41b43283d1e
- 88369ffe15fc13a93cebd6aae7466609a1ef3286
- 89928295ff61ddffa9fc9c709d7556bd0ed4a9da
- 8a44828238d05cb4ef58221afafd0cc08cd150b3
- 8a757da747a782ced428ee81e53e6326f1ab277d
- 8b72238eb623c8a16ab2968a2300246046d86928
- 8bae12e24a4424062697c2c31ef0bb20a9bc0e7d
- 8bb29c40e6811394bae35a0d3ce0c424491371d9
- 8c6c1dfbcae959a735586b8f5b1a2fac5323ef59
- 8e9d20e76222a48ec1ec7d272dd9e0405308617e
- 8eea84d8926dce44663ae1993f2623af3f40ab3b
- 8fdae882a2e94d6bc7e1a34211af2efdce196626
- 916ab802543f2d94fce1b10ddf394f213cea0709
- 92a3839c80a8772567a5d7089c178cdf3fecada1
- 9382fdc5b859aa94bff13dc43f4a8badaa888fee
- 93adbf7953313dbf77bbbf31d304a6febff18767
- 93b6b210e8ba8544aed0cce3f91a6e9458d440cd
- 93eb76e783245d618f91426303c6080606645a4c
- 9537ee5d77c5d3f2a605d4a398df43ce6bc013ea
- 957645e5ea6d97a4383672021a7a74887b725817
- 9674bdb8ba0f9b8e7473b2f5a6396b306d90c921
- 96ee1b6b95d5511aa03ba78e497c18195197ccba
- 977eb89ca20f1fdd0976bf676f35b85f5c5d2c9b
- 97f6069b53a44518803455d4007360950716a467
- 982291053af978431e90c8e1ef873c54d141de3c
- 99503ff18a17d318b7d27d16245fee4bd737bbef
- 9a111487544128c76b1516d8090d5e5a94dbb44a
- 9adad458941038d359f05f4f008ce3bc586ef9ba
- 9c4fd56650e47900bb5036a338a73208f3274fb4
- 9c736a0d2da4822d712db5f1c9858b4cbd28d19b
- 9f2f7e4d4d036b4b566d28ebd69d95fb7c8dc2d1
- a0338aa0989eb9977e96c8d81a6a263c53aeaf93
- a0907b7ffa6782f556b17c17e717be3a42b45975
- a09cd885de4639d3c9d07b818f63e646b7d880b0
- a1ac7eadab3bbd44d23db62d488dba006f26b558
- a362f72d8d784ee78b2676611c872df62897ecc3
- a50803d73420ea82700d348e72168c30f0df14c3
- a541b8ec349d1ed0b98c995618a8eac93d097fc6
- a5f166e03dfa09cd3460aba4bb6292def4444341
- a7c622d8e973551d222539864082cac8d25ecae0
- a7cda70d88d1b15ed1f4acec3b86dbecda246fd4
- a85439890a3a9538420d63a93dfb6e12ed3a5ce7
- a8920727e71e4aba574a74bcf6374c97af693ad1
- a8a868564eefb7dac76d5a595adab257ae6910bb
- a94eae38b37ac80722eccffe8724933b951d2b58
- a9d272a9f018ec9c670c19d40a2bc2aa617207a9
- aa447034ec546e54a1b8ebb482377aae5e0dce17
- ab5f64f43693e51ca7316e28fbd902d4849dd025
- abd708177a3b1a34a5290312bd0dac7ed2257d36
- acbab2110cd7749f4f4febbfebd38ab72fcc7c9b
- acc6536d222bfc1cacdf236b16268d1028d82fd5
- adbcbfef86df52099542d01a45db9b8037d4ec69
- aff7a1370b9550983afc726a994a262ba25bda91
- b03b7b641029c445e299ac91e87ca92905527540
- b07baff55d9a43d93246583d34f62db7127787ca
- b15f97a4fad3bfacb43334dc720c7a60227653b7
- b230b185c3c39c2c20d90fc144e20b73c6bf1aab
- b237e778d3bd18b4581fb380a9961e6677969290
- b2fa05411fe2038e4da1880144f94c593cf1280a
- b41b3f714cf82adc791d79b72316063cecd01e89
- b44dc697bac73eba1febf3dab1c946831fcc367a
- b5adc5665079f40e60b4941ace20ec32345963d6
- b61637f78fdae3b4ad7882c367976f773e9e59ed
- b6bb753c97d0d151af0e56d02b05bc3f8c420517
- b95d8584ad27f9de6cad837733bd4d723b0a4efe
- b99d743dcce352b1fa5aa2f845cd88f248199ecd
- ba2362271abb5831b3e529aa80138c132e8b5ba2
- ba4eb346f9e82e0dde7eef501ab88565f5591da3
- bce7a1d51239ee26137fc39a9f01ab2c5ed0b5df
- bd04b3c0840580e072806074bd309b07e61c7599
- bddeae58211c4ea524db367ff84e550921cb4bea
- be73c53a04a37643f63e8866201466a606a96a3c
- be8c1ad0d4d97d73b04afaa27268bf9b1a44f99c
- c184eb1afdc919f25432470c99a0b0283ccfa35b
- c276cab7bcced7f9b5f76ba957251df2751b36e5
- c2810c51e2be320d639fa5b1cb295805c8ea4ce4
- c3bd59e6cb6eb4d4bcfe95d13755dde8bf0335ec
- c45deda16af0a9b0ce160c80909ef6dc6413d2d5
- c4bbf71539e71b4171d669c16b3d17b20fe820c5
- c4bdc0e0f2a3d9ee77d7d9c37e95572e78f29cbf
- c4f9eeaaab4af36272ef7dadfd9093c653ad2b6a
- c5b2c38f6a6093602a490f32dd697e1234eaaeaa
- c5c790b9680e1b39765aaa510ecc527534d16645
- c5ed0d681f90ee5f60a16116194caaffd60ab012
- c6858a96d8d73e563ed2864ca5bb1327291ca6b6
- c7200012bf32e426081c1f9e8a8167fa88e2fac0
- c7b4f93fd4ab48b5fd7df8b4b6f4ebe4e335dbdd
- c9026001509ec0e8b899ba92bc2b2e36b4c5f301
- c93f56fccf083f6e711601d7b6d215c9ceec53f9
- c9f169da716e081c5a492ac2244f475ff652991c
- ca2ceaa05773674738e7f62715afc5210dbfa4c7
- cac8c19e85e2031ab0a69a598f170aab7ed13f38
- cb0e0851ace1e670a6d7826c1d05c738a1bf9e12
- ceb06d3aeab91ce9e0a8989759d05e48a054ff9d
- d0af2c082d8e6ca707e4fb768715dc8974ca62be
- d10855e6a2f3f3a68f8aa2c71180da0403e23350
- d1d7e0dfbc2105abf14a14955825c2ea70fbe1b8
- d48ba6dae4be84be6a202c60c2443cf8c66adace
- d498e1c8aea472e8189975b6654e42bb38cd113b
- d506744278898ff0363cebc435b7e5674eb84a8c
- d511f4f6bd39755195c1e5949269633960e2c85a
- d5ac74d5f581b4bf2e45311fb94a07198de33ce7
- d646785cc5d4e3558a83d5b5f960e9076fb8b494
- d6d4e97af00893de62257162e30b0bb20790b6d6
- d7526453a3c1c870272430e6e6376dbe09f9cca3
- d7f8a1313916fc49992ace33b3bdefdf1f309c11
- d8ad68c12e5f813e007ef1f4bb12b9fbc930ddde
- d8c3ea83c90fa53d07f1847e5047596b0a484b16
- d91c48ca75b606f00001bbe92372b23c9de39f99
- dca5fe92be8953f56955984f416562387d74f88f
- dd3886b72843ecef25f0ee83b8f74ace3da391c1
- dd587590091d523912d80ca0c6855423aab26126
- df67a164fdc6581ed1c226f5ad4daab2deb3ba31
- e0297ce574710392f6938bd9f5395128632a56f1
- e03facf2248681cc69278fb384693fc707d18101
- e0aab102726ae49c97221a1a08ec83b18ee94d9b
- e1478e82094c09c9765658e2faaa51ff0f0f8a73
- e193e4a8fc051dfc596a1ad70ee1ab99a28679bd
- e255ca839fc70785b13054337bad6f41b1f65fd8
- e2fbd0b4751145b2d44b15741a3f935c545e06aa
- e38734e2f8f7c7f0ecc9b62b6367921f4944bbfd
- e3965b57f7d372a01e23c7a9aa950cc557a57a42
- e44c25157c4c65fc6ade179d4d3fa0407a38f880
- e4fa892f2252e562001b28b1c6f407f80832db62
- e66f77068143bd3ffc4f5fd8cc33dfa77df85a24
- e6f62825321f537a4c41817404ce8fb284ebd836
- e7cd69a140c7733f3be9f43d25bbfc78bff94d97
- e7d3d786871c8d8bf07df58bbf1a86000179ce0d
- e82330bab3b5041ed0db605bd6c7b04229e98c1f
- e8acf26abdd614a06f435337fe7a21e51893869c
- e8fee73aaafd8b9e75441c9767ab50a7ce5f9c31
- e9b80754e66a6ddb1843f9f57e6e530be6436554
- ea396fc739f28b336a443847462739bd21c94270
- ebecba19e7fd6f80c3cce77288c38e6c61bf7446
- eca1175c6c6b06aa466870c51d07326ba07b5bfe
- ece6cc313dc9a0f77c840670c3dc3ce5f33c1d3c
- edc5c173fbdd8f12c24102b01286cbd90abb5ee8
- ee4982482b94661cd2b50abe9ddbfaabc3bf1f18
- ee7aadcbec95e19c6d9ab5ef2beb3ce76aac19b5
- eebb9cc2b1394b827255203f02ce772591a61956
- eee87504008b8e2c0d287c9e3143ee321ed068a2
- ef4381a240b7455c7f532dc7bbb8938704d7abd9
- ef5ab0cab28b0700f1dc3e243867ae1602af808f
- efc042d4501f92360e9e301cd3fc5239deb13ebb
- f03db920746807466419c4a5096496afbf8f53e2
- f06dab3f2b17442989d9f48d4064c2adb73b8f06
- f0ab8f0d60e4faa56df94253dc5a2cd6914f4741
- f23450d854d42378a3fc9efef744006d8f710d25
- f3624295cac6160378adc3c3623f5522f1756cc3
- f79bfdaa913e974754062fdab85c4c30b5034717
- f9219e3215d94b82fc89fe380d48f451ee8d844e
- f9da3b527fdd23823cd89b28bda9b42090965d82
- fa613fa2734c4e782baa532a5acf5d4b2f2d4c28
- fc7327a4030da926eebf778101f8e24b5d3d3681
- feb597402d2de8e50b8e05a9ea67ead1dc69d69a
Affected Products
PoS
Remediation
- Block the threat indicators at their respective controls.
- Enable EMV payment methods (Chip and Pin or Chip and Signature).
- Ensure that your credit or debit card is EMV compliant, or may even be supporting contact-less payment.
- If terminal to bank connection is made through a proxy and no direct internet connection is provided, the chances of immediate data exfiltration will greatly be reduced.
- Try to limit the number of open ports.