Cyber Risks · Krebs on Security

Crooks Net Millions in Coordinated ATM Heists

Summary: Organized cyber criminals stole almost $11 million in two coordinated ATM cash-out heists at the end of 2012, taking roughly $9 million from ATMs in at least a dozen countries on Christmas Eve and slightly less than $2 million from a card network in India just before New Year's Eve. The attackers used a small number of re-loadable prepaid debit cards and raised or eliminated the daily withdrawal limits by gaining access to the internal systems of a prepaid card network, prompting Visa to warn issuers in January 2013 that over $500K had been withdrawn on a single card in less than 24 hours in one reported case.

What you should know: Visa's alert states the attackers got into issuer authorization systems and manipulated withdrawal limits, balances and card parameters - the same access that let them withdraw over $500K on one card in under 24 hours, and the same pattern behind the $13 million FIS/WildCard Systems heist and the $9 million RBS Worldpay heist across 2,100 ATMs.

Read the original at Krebs on Security ↗

Topics
Cybercrime & Law Enforcement
Related