Treasure trove. Alive and well point-of-sale malware

Group-IB discovered and analyzed a command-and-control server hosting administrative panels for MajikPOS and Treasure Hunter POS RAM-scraping malware, recovering roughly 167,000 compromised payment card dumps (predominantly US-issued) and identifying infected POS devices, actor tradecraft (VNC/RDP brute-force, RAM scraping), and actionable IOCs; the report quantifies potential underground sale value (~$3.34M), maps geographic distribution, and provides mitigations and detection recommendations.