Cyber Risks · Krebs on Security

Would You Use This ATM?

Summary: A Krebs on Security reader photographed a grocery-store ATM in Northern Virginia with an exposed Cisco switch and wireless antenna mounted on top, its console cable still attached and zip-tied in place. The article states that thieves who reach an ATM's networking cables can attach sniffing devices to capture card data moving across the ATM network in plain text, and it advises favoring wall-mounted or bank-operated machines over free-standing ones.

Key Takeaway: The physical and IT security professional who flagged the setup noted no cameras were present and the console cable was still attached, so his assumptions that unused interfaces were shut down and port security was configured are likely invalid. If an attacker can walk up to the hardware, the network controls protecting the card data are only as good as the lock on the cabinet.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related