if you dont find him, you can try writing this soft by yourself, i think this is a downgrade attack.
Setup normal merchant account
find old SDK libraries
inspect traffic from this old sdk library and newer sdk (legit website)
try to use the same tokens by changing methods and maintaining variables one by one until it allows payment.