ScanPOS

Malware type
credential-stealer
Family
Malware family
Profile updated
2026-07-07 15:08:54

Targeted industries: retail-and-hospitality

Context

ScanPOS is a type of point-of-sale malware primarily used to steal credit card information from compromised POS systems. It targets the retail and hospitality industries and has been linked to several significant data breaches.

Detection coverage

  • 1 YARA rules

Detection rules

  • MALPEDIA_Win_Scanpos_Auto (yara-rule)

Reports & references

  • proofpoint.com — Kronos Banking Trojan Used To Deliver New Point Of Sale Malware (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Scanpos (report)
  • securitykitten.github.io — Scanpos (report)
  • github.com — 2016 11 15 Scanpos.Md (report)

External references