FrameworkPOS
- ID
- S0503
- Type
- Malware
- Associated names
- Trinity
- Source
- attack.mitre.org
- MITRE last modified
- 25 Apr 2025
FrameworkPOS is a point of sale (POS) malware used by FIN6 to steal payment card data from sytems that run physical POS devices.[1]
Techniques used (5)
- T1005 Data from Local System
- T1048 Exfiltration Over Alternative Protocol
- T1057 Process Discovery
- T1074.001 Local Data Staging
- T1560.003 Archive via Custom Method