Jump to content

Memory-scraping malware

From Wikipedia, the free encyclopedia
The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

Memory-scraping malware or RAM Scrapping malware is a malware that scans the memory of digital devices, notably point-of-sale (POS) systems, to collect sensitive personal information, such as credit card numbers and personal identification numbers (PIN) for the purpose of exploitation.[1]

Operation

The magnetic stripe of payment cards hold three different data tracks – Track 1, Track 2 and Track 3.[2] The POS RAM scrapers were created to implement the use of expression matches to gain access and collect the Track 1 and Track 2 card data from the RAM process memory. Some RAM scrapers use the Luhn algorithm to check the validity of card data before exfiltration.[3]

See also

References

  1. ^ "Memory Scraping Malware". Retrieved 2015-02-12.
  2. ^ "POS RAM Scraper Malware". Retrieved 2015-11-18.
  3. ^ "Exfiltration of Data with POS RAM Scraper Malware" (PDF). Retrieved November 29, 2017.