LusyPOS malware, a new point-of-sale malware uncovered by CTBS reverse engineers early this month, appears to be “more clearly related” to Dexter than Chewbacca, according researchers at Trend Micro.
A Monday TrendLabs blog post noted that despite its use of Tor a la Chewbacca, the names in the LusyPOS code mirror those found in Dexter's “very distinctive text string.”
While Trend Micro had included strings used by Chewbacca in its initial analysis of malware families, “the analysis of LusyPOS did not indicate these strings are present,” the blog post said.
After further examination, it appears “It's possible that LusyPOS may be a new Dexter variant that has copied the TOR behavior of the newer POS malware family,” the blog said, noting that given Dexter's proven threat, "LusyPOS "is a significant addition" to the "repertoire" of POS threats.
