POS firm says hackers planted malware on customer networks