POS - Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 18:10:40 UTC Home > List all groups > List all tools > List all groups using tool XBOT-POS Tool: XBOT-POS Names XBOT-POS XBot POS Category Malware Type POS malware, Credential stealer Description (benkow) The bot ad: Selling xbot ,new bank trojan -- Modules -- Webinject -- Formgrabber -- Socket4/5 -- Hidden VNC New bot bank xbot is available for rent (800$/monthly) -- server on tornetwork/clearnet Customized programming service and web developer/c/c++/Python/NET/others Team Coder/NZMR xbot costs 3k $ modules available >webinject -- formgrabber -- Socket4/5 -- Hidden VNC When buying xbot what do you get? You will get the builder,bin/exe+socket.exe/server.exe hvnc [+] - Free installation on your server in tornetwork or clearnet, you choose [+] - monthly support paid 100 $ (you choose,with or without support) [+] - Update bot for new version 400 $ [+] Rent xbot Panel access (Clearnet/Tornetwork) Bin (exe) Socket.exe/hvnc.exe Priçe 800 $ monthly (First 6 customers, others 1k $) Support monthly 100 $ (btc) Information Malpedia Last change to this tool card: 28 December 2022 Download this tool card in JSON format https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=db81462b-25a0-443d-9621-fd39428dc6d6 Page 1 of 2 All groups using tool XBOT-POS Changed Name Country Observed Unknown groups   _[ Interesting malware not linked to an actor yet ]_   1 group listed (0 APT, 0 other, 1 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=db81462b-25a0-443d-9621-fd39428dc6d6 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=db81462b-25a0-443d-9621-fd39428dc6d6 Page 2 of 2