Forest Global Training Partners

Cyber Risks · Krebs on Security

Thieves Jackpot ATMs With ‘Black Box’ Attack

Summary: Thieves carried out a "black box" ATM attack by gaining physical access to the top of the machine, disconnecting the cash dispenser from the ATM's core computer, and connecting their own computer to force the dispenser to spit out cash. The attackers added a USB-based circuit board that NCR believes was meant to fool the core into thinking it was still connected to the dispenser, and used an out-of-the-box Samsung Galaxy 4 phone relaying commands through a dynamic IP service so the person issuing them could be remote.

Bottom line: NCR's Charlie Harrow called it "a pretty cheap attack" that is "relatively simple to do" if you know the right commands, and NCR has seen only two black box attacks so far against far more malware attacks - but in principle, he said, there is no reason they could not become more common.

Read the original at Krebs on Security ↗

Topics
Fraud & Scams
Related