NewPosThings gets x64 edition, found mostly in airports

dbit

See this was found last year , and demonstrates that malware actors , are moving more towards the high rotation spots , obviously not limited too airports with more active tills all year round . One thing i take from it is the baseline recommendations and SRP's at deployment time when you know they are clean .

Full removal and preventative steps in link.

http://blog.trendmicro.com/trendlabs-security-intelligence/newposthings-has-new-pos-things/