In the UK we don’t often come across brand new POS malware, presumably as we are in a Chip & PIN market, so the “return” for attackers on deploying such technology is limited. Last week, though, we did come across what appears to be a new sample that we’re calling TinyPOS. Read more here.
We’ve seen two variants at this point in time, although they're almost identical, and we will provide additional information over the next few days. Hash values for the samples seen are below. md5 deb132c28f43fd86508f5ef363a28a73 sha1 a0bb561c1c76e23be99db00089c1350d230238ac md5 039bd8cc80126ad2b21b45364d47220e sha1 4920fe1afe5f1fa5ec39499aff807d8c2ca657a7