216.73.217.172

FrameworkPOS

The MITRE Corporation · Published 08/09/2020 16:55 · Modified 27/03/2026 01:03 Family

Essential information

Confidence
100/100
Is family
Yes
Published
08/09/2020 16:55
Modified
27/03/2026 01:03
Revoked
No
Author / Source
The MITRE Corporation
Related entities
5 attack patterns (mitre), 1 intrusion sets (apt)

Aliases

Trinity

Description

[FrameworkPOS](https://attack.mitre.org/software/S0503) is a point of sale (POS) malware used by [FIN6](https://attack.mitre.org/groups/G0037) to steal payment card data from sytems that run physical POS devices.(Citation: SentinelOne FrameworkPOS September 2019)

Marking (TLP)

Copyright 2015-2025, The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.

External references