Point-of-Sale malwares / RAM scrapers

[benkow_]

Looks like they didn't learn to properly handle user input:

Code: Select all

  // Create query
  $q = "SELECT * FROM `dbUsers` WHERE `username`='".$_POST["username"]."' AND `password`='".$_POST["password"]."' LIMIT 1";
  // Run query
  $r = mysql_query($q);

If it were only this problem.... ^^

[bsteo]

No PDO in XXI century?

[TETYYSs]

No PDO in XXI century?

shh, dont give them ideas

[Silence_is_best]

MajikPOS:

Via:
http://blog.trendmicro.com/trendlabs-se ... -and-rats/

VT links:
https://www.virustotal.com/en/file/4bbc ... /analysis/
https://www.virustotal.com/en/file/25e4 ... /analysis/

pass is infected

[tildedennis]

LockPoS

https://www.arbornetworks.com/blog/aser ... ins-flock/

I haven't seen much more of this in the wild.