GlitchPOS: New PoS malware for sale
Summary: Cisco Talos analyzed GlitchPOS, a VisualBasic memory-grabbing point-of-sale malware that receives commands as base64-encoded shellcode from its command-and-control server and maintains an exclusion list of processes including chrome, firefox, svchost, lsass and winlogon. The built malware sells for $250, the builder for $600, and a gate address change costs $80, and Talos assesses that Chameleon101 took malware previously created by Edbitss, allegedly the developer of the DiamondFox L!NK botnet, and resold it on an alternative forum at a higher price.
Why it matters: A working card-skimming tool with a builder and a support fee is priced at a few hundred dollars, low enough that the average user could assemble their own credit card-skimming botnet, and the panel code was reused from DiamondFox.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026