Jump to content

Memory-scraping malware

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by Comp.arch (talk | contribs) at 16:01, 5 November 2016. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Memory-scraping malware is malware that scans the memory of digital devices, notably point-of-sale (POS) systems, to collect sensitive personal information, such as credit card numbers and personal identification numbers (PIN) for the purpose of exploitation.[1]

Operation

The magnetic stripe of payment cards hold three different data tracks – Track 1, Track 2 and Track 3.[2] The POS RAM scrapers were created to implement the use of expression matches to gain access and collect the Track 1 and Track 2 card data from the RAM process memory. RAM scrapers also use Luhn algorithm to reach access and ex-filtrate victim's card data.[3]

See also

References

  1. ^ "Memory Scraping Malware". Retrieved 2015-02-12.
  2. ^ "POS RAM Scraper Malware". Retrieved 2015-11-18.
  3. ^ "Exfiltration of Data with POS RAM Scraper Malware" (PDF). Retrieved 2014. {{cite web}}: Check date values in: |accessdate= (help)