GamaPoS - .NET PoS Malware In the Wild | Fortinet Blog

GamaPoS has received a fair amount of attention since its discovery, in part because the use of .NET is (currently) unique among PoS malware and in part because it leverages the versatile Andromeda botnet. At its core, though, GamaPoS is a scraper designed to steal payment data from the RAM of PoS systems. 

GamaPoS is the first documented PoS malware to be written in .NET. Malware written in .NET comes with its advantages and its disadvantages, both for authors and researchers. The most obvious benefit for its authors is that it is quicker to develop, but the binaries are much easier to disassemble. 

GamaPoS - .NET PoS Malware In the Wild | Fortinet Blog