After being installed on a payment switch server's running process through the 'ptrace' system call, FASTCash for Linux facilitates ISO8583 transaction message interception and alteration, according to cybersecurity researcher HaxRob, who discovered the updated variant.
Article Link: ATM cash theft aimed by new FASTCash malware for Linux | SC Media