Gang Hacked ATMs from Inside Banks
Summary: A gang of hackers from Russia and Ukraine, dubbed the Anunak group and tied to the Carberp trojan operators, broke into internal networks at more than 50 Russian banks and used malware to alter denomination settings on 52 Wincor ATMs, stealing more than $15 million from Eastern European banks. The group gained entry through malware-laced emails posing as Russian banking regulators, purchases of access to already-compromised PCs, and botnet installations, and is also linked to card breaches at 16 US retailers including Bebe, Sheplers, Staples and possibly Michaels.
What's compelling: The report puts the average time from initial intrusion into a bank's internal network to successful cash theft at 42 days - a window in which detection, not prevention, is the only control that matters.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026