An Analysis of the Backoff PoS Malware | Fortinet Blog

On July 31, 2014, the United States Computer Emergency Readiness Team (US-CERT) published an advisory of a newly identified point-of-sale (PoS) malware dubbed “Backoff”. This family of PoS malware consists of three versions: 1.44, 1.55, and the most recent 1.56. Backoff variants began to have version names starting from version 1.55 (which used the names backoff, goo, MAY, and net); version 1.56 used the variant name LAST.

In this blog post, we will briefly look at an overview of the Backoff malware before discussing the unique memory-parsing techniques and command-and-control (C&C) communication of its latest version LAST.

An Analysis of the Backoff PoS Malware | Fortinet Blog