New malware demonstrates how threat actors are pivoting toward payment platform attacks, researchers say.