Researchers believe this is a new tactic designed to allow attackers to get the biggest bang for their buck ransom payments and credit card data. Researchers found the Sodinokibi ransomware sniffing out PoS systems on the compromised networks of three large companies in the services, food, and healthcare sectors. It’s not yet clear whether the attackers are targeting this PoS software to encrypt it as part of the attack, or because they want to scrape the credit card information on the systems as a way to make even more money.
Source: https://threatpost.com/sodinokibi-ransomware-now-scans-networks-for-pos-systems/156855/