PoSlurp

Aliases: PUNCHTRACK

Malware type
credential-stealer
Family
Malware family
Profile updated
2026-07-07 12:50:56

Targeted industries: retail-and-hospitality

Context

PoSlurp, also known as PUNCHTRACK, is a malware family designed to steal payment card data from point-of-sale (POS) systems. It primarily targets businesses in the retail and hospitality industries, utilizing memory scraping techniques to capture and exfiltrate sensitive information.

Detection coverage

  • 1 YARA rules

Detection rules

  • MALPEDIA_Win_Poslurp_Auto (yara-rule)

Reports & references

  • root9b.com — Pos%20Malware%20Shelltea%20Poslurp (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Poslurp (report)
  • atr-blog.gigamon.com — Abadbabe 8Badf00D Discovering Badhatch And A Detailed Look At Fin8S Tooling (report)
  • twitter.com — 1162118585805758464 (report)
  • norfolkinfosec.com — Fuel Pumps Ii Poslurp B (report)

External references