Drugs Tripped Up Suspects In First Known ATM “Jackpotting” Attacks in the US
Summary: Three Venezuelan nationals were charged in a U.S. District Court for the District of Colorado complaint with ATM jackpotting attacks that used Ploutus.D malware to force cash machines to dispense money, starting with an October 10, 2017 hit on a credit union ATM in Parker, Colo. that netted more than $24,000, with similar attacks later found in Saint George, Utah, and the suspects detained in Teton County, Wyo. on November 16, 2017, for drug possession. Surveillance video showed the men opening the ATM's top compartment, removing the hard drive, and later using mobile phones and a small wireless keyboard while the machine restarted and dispensed cash.
What you should know: The attacks required only physical access to the ATM's computer compartment, not the cash vault, and FireEye noted that with minor code changes Ploutus.D could target software running on 40 ATM vendors across 80 countries.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026