Kasidet PoS Credit Card Scraper Hides C&C Servers on Namecoin's Blockchain

A versatile malware family has added the capability of using Namecoin's blockchain-based DNS service to hide C&C (command and control) servers.

Back in mid-September 2015, security researchers from Russian-based cyber-security firm Dr.Web were announcing the discovery of a new malware strain targeting PoS systems called Trojan.MWZLesson.

Researchers were befuddled by the presence of features that allowed this malware to launch DDoS attacks. A week later, security researchers from Trend Micro, discovered that this trojan was actually the Kasidet (Neutrino) DDoS malware that added support for a PoS memory scraping module, a discovery also confirmed by Dr.Web later on.

Kasidet operators were deploying...