Forest Global Training Partners

Cyber Risks · Krebs on Security

Spike in Malware Attacks on Aging ATMs

Summary: Organized crime gangs in Malaysia stole the equivalent of about USD $1 million by installing malware on at least 18 NCR ATMs, all of them older Persona-series models, according to media reports cited by Krebs on Security. NCR's Owen Wild said roughly half the installed base still runs Personas, that attackers reached the machines by peeling off the top or drilling into the facade to insert CDs and USB sticks, and that the malware used in Malaysia was the PadPin family identified by Symantec.

Key Takeaway: The European ATM Security Team tracked at least 20 malware jackpotting incidents in the first half of the year, the first reported in Western Europe, while overall ATM fraud losses reached €132 million (about USD $158 million), up 7 percent year over year. Half of an ATM fleet still sitting on a seven-year-old model line, with CD and USB bays reachable from outside the box, is the exposure a security leader inherits when hardware refresh loses to budget.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related