atms

  1. BadB

    Bugs instead of a sledgehammer. Analyzing logic attack scenarios on ATMs.

    Contents of the article ATM device User level (input devices and kiosk application) OS level Network layer Firmware level Classification of ATM attacks Logical attack scenarios for ATMs Black box attacks Gaining access to the ATM OS (bypassing kiosk mode) Attacks on vulnerabilities in control...
  2. BadB

    Logical attacks on ATMs: How hackers bypass security and gain access to funds

    In the first part of this article, we covered in detail the structure of an ATM, how it operates, and the main types of attacks on ATMs. Now it's time to move on to the most interesting part: logical attacks. In the second part, we'll tell you how ATMs are hacked without any fuss or fuss. This...
  3. BadB

    Modern ATM Attacks: What Happens Inside the Devices and Where the Vulnerabilities Lie

    The primary goal of ATM security analysis is to identify theft scenarios that can be carried out by hackers of various origins (external or internal, such as bank technical staff) and levels of training: from a casual attacker using off-the-shelf malware to a service engineer with knowledge of...
  4. Tomcat

    When the hardware gets chilled: monitoring NFC modules of ATMs

    Hello! I work at developing technologies for automating the maintenance of various hardware, including ATMs. In many engineering and technical fields, there is a concept of "monitoring". In IT, there is "simple monitoring", which usually implies tracking the behavior of software and its impact...
  5. Friend

    London Resident Accused of Illegal Management of Crypto ATMs

    UK police have accused 37-year-old London resident Habibur Rahman of installing unregistered crypto ATMs and laundering $300,000 ($393,700) through cryptocurrencies. Habibur Rahman was arrested in 2023 during a police raid on an electronics store in Chatham, Kent, where several crypto ATMs were...
  6. Carding Forum

    NFC bugs allow contactless hacking of ATMs using smartphones

    A cybersecurity researcher has discovered a number of bugs that allow ATMs and POS terminals to be hacked. Experts and criminals have previously demonstrated attacks on ATMs, but this time we were shown a truly new method - using a smartphone and a contactless card reader. Joseph Rodriguez, a...
  7. Tomcat

    The police detained a group of robbers "at ATMs"

    In the autonomous community, a criminal group was arrested, whose members organized robberies of elderly people while they were withdrawing cash from ATMs. According to preliminary estimates, the total damage caused by illegal actions of intruders is about 21 thousand euros. It is noted that...
  8. Tomcat

    Half a billion was stolen from Russians using foreign ATMs

    In Russia, the number of cases of theft of money from bank cards using ATMs located in other countries is growing. The amount of thefts amounts to hundreds of millions of rubles. In total, more than 6.4 billion rubles were stolen in Russia in 2024, of which clients managed to return only a...
  9. Tomcat

    Romanian gang carders stole $1 million from Australian ATMs

    Five Romanians carders have been arrested in Melbourne on suspicion of using skimming to produce counterfeit bank cards. According to local media reports, scammers managed to steal more than $1 million (apparently in Australian dollars) using just one of the “infected” ATMs . Experts from the...
  10. Tomcat

    Protection of Diebold Nixdorf ATMs from black box attacks proved unreliable

    Researchers from Positive Technologies have identified vulnerabilities in Wincor ATMs of the Cineo line (the trademark belongs to the Diebold Nixdorf concern). As it turns out, they can be forced to issue cash by issuing a command from an external device - despite protection against such...
  11. Tomcat

    New Unix rootkit steals payment data from ATMs

    While monitoring the activity of the LightBasin cybercriminal group, experts came across a previously unknown Unix rootkit that is used to steal payment data from ATMs. Using this malware, attackers can conduct unauthorized transactions. The operators of the new rootkit are known for their...
  12. Tomcat

    Viruses in ATMs: danger or free money?

    The Central Bank of the Russian Federation sent information to banks about the spread of a virus that forces ATMs to issue money using a code entered from the keyboard. Anyone can withdraw money from an ATM infected with this virus, just know the code. ATMs manufactured by NCR were infected...
  13. Tomcat

    ATMs on Windows are attacked by the FiXS ripper Trojan

    Metabase Q experts have discovered a new malware designed to steal cash from ATMs running Windows. How infection occurs has not been established, but most likely it requires physical access to the device. An analysis of the sample carried out by the cybersecurity company showed that the Trojan...
  14. Tomcat

    European ATMs are opened like canned goods

    In the digital space, a new type of malware for ATMs is actively spreading, which impresses with its effectiveness — its success, according to the authors, reaches 99%. This malicious software, dubbed "EU ATM Malware", is capable of hacking almost any ATM in Europe and about 60% of ATMs around...
  15. Tomcat

    Call Kuza: how we wrote down an FAQ for ATM's engineers

    Every month we receive 20–50 thousand calls with questions about ATM servicing. Most often, engineers call to find out the status of an application, gain access, check software versions, etc. Or cash collectors - to understand whether there are any malfunctions on the ATM they are dissecting...
  16. Tomcat

    A smart banking Trojan allows you to withdraw almost unlimited amounts of money from ATMs

    Kaspersky Lab has discovered and analyzed interesting malware that targets banks and banking networks. This is a whole software package consisting of about 30 different modules that can remain in the banking network undetected for a long time. The Metel system is called (there is also another...
  17. Tomcat

    MGM shuts down slot machines and ATMs at Las Vegas casinos due to cyberattack

    MGM Resorts, which operates hotels and casinos in Las Vegas, faced a “cybersecurity issue” that forced management to shut down much of its gaming systems, ATMs and credit card machines. The company's main website also stopped working, and the ability to book hotels online was disabled. MGM...
  18. Tomcat

    Due to a malfunction, Bank of Ireland ATMs were dispensing €1,000 to each customer with a zero account balance for almost 24 hours

    On 15 August 2023, due to a glitch, Bank of Ireland ATMs began dispensing €1,000 to each customer with a zero account balance. Customers began lining up at such ATMs after they learned about the banking error through word of mouth and social networks. Police said they were aware of an "unusual...
  19. Tomcat

    On the trail of Cobalt: logical attack tactics on ATMs in a Group-IB investigation

    First Bank, one of the largest banks in Taiwan, was paralyzed. The bank faced a large-scale attack: masked men simultaneously emptied three dozen ATMs worth $2 million. The police were at a loss: there were no signs of hacking or overhead skimmers on the ATM bodies. The attackers didn't even use...
  20. Tomcat

    A Brief History of ATMs: How Automation Changed the Retail Banking Sector

    At first, when I talk about my interest in ATMs, my interlocutor's eyes glaze over. But then, when I explain why I think their role is important, many people begin to remember their stories related to them. A chance meeting in line, or the fear of being robbed in an unfamiliar place, or the...
Top