POS malware for sale

LusyPOS, a new kind of point-of-sale malware, is being offered on the internet for $2,000.

Brian Minick, vice president of the advanced security business of CBTS, a Cincinnati, Ohio-based security company said it has been advertised on an underground carding website, where people buy and sell stolen payment card data.

“It’s the first we’ve seen of it,” Minick said. “It looks pretty new.”

LusyPOS shares some of the same characteristics as two other well-known POS malware programs, Dexter and Chewbacca. Minick said it’s not uncommon for malware writers to borrow code from other programs to make a new malicious application for profit.

The malware was found by Minick on Virus Total, where people submit malware samples to see if they are detected by more than four dozen antivirus programs.