Cyber Risks · Krebs on Security

Thieves Planted Malware to Hack ATMs

Summary: Authorities in Macau arrested two Ukrainian men accused of using a circuit-board device, connected to a small laptop and inserted into ATM card slots, to install malware that captured card data and PINs and stole roughly $100,000 from at least seven ATMs. The insertion crashed the ATM software to a black screen, and the thieves allegedly returned days later to reinsert chip cards that retrieved the stolen data and then destroyed evidence of the malware.

What you should know: The attack required only brief physical access to the card slot, and the article notes many ATMs still run on unsupported Windows XP and are often patched by USB thumb drive rather than over a network - so the machine's physical and software exposure sits with whoever owns and services it.

Read the original at Krebs on Security ↗

Topics
Cybercrime & Law Enforcement
Related