Cybersecurity incident — 2019-10-10 00:00:00
Affected organization: NCR Corporation
Affected country: United States of America
Industry: Finance and Insurance
Event type: Exploitive
Event subtype: Exploitation of Application Server,Exploitation of End Hosts
Motive: Financial
Actor: FIN7
Actor type: Criminal
Actor country: Russian Federation

Researchers from FireEye discover new tools from the FIN7 group: a loader, dubbed BOOSTWRITE, that delivers payloads into memory and a module, dubbed RDFSNIFFER, that hooks into the remote administration software of ATM maker NCR Corporation.