A new memory scraping malware program called GamaPoS is distributed by a large botnet known as Andromeda. The program is written in Microsoft’s.NET, which is unusual for RAM scraping malware. It monitors the memory of point-of-sale systems for payment card data and steals it while it’s being passed from the physical card readers to the commerce applications. GamaPOS infections have been found in a wide variety of industries, including pet care, theater, furniture wholesale, home health care and online retail.”]

