An advisory published by the US CERT (Computer Emergency Response Team) warns of a new malware family with low to zero antivirus detection that exfiltrates payment information from PoS systems. The malware has been called Backoff and it has been observed in multiple forensic investigations, with three main variations operating since at least October 2013; CERT notes that the threat persists as of July 2014. In order to plant the malware on the PoS systems, threat actors would f…