Hacker forums sell malware for cryptocurrency ATMs

[Carding 4 Carders]

Due to the rapid growth in the popularity of cryptocurrencies, specialized cryptocurrency ATMs began to appear. These ATMs outwardly resemble ordinary ATMs, but they work a little differently.

The main difference between a cryptocurrency ATM is that it connects not to the user's bank account, but to a cryptocurrency exchange where you can buy or sell "digital" money. The purchased cryptocurrency is then sent to the user's cryptocurrency wallet. That is, a cryptocurrency ATM is not an ATM in the usual sense, but rather is a terminal for accessing cryptocurrency exchanges.

Conventional ATMs are a favorite target of hackers, but there is little information about attacks on their few cryptocurrency "brothers". However, attackers have already targeted cryptocurrency ATMs.

According to experts from Trend Micro, malware for attacks on cryptocurrency ATMs is being sold on underground forums. In addition to the program itself, the buyer will also receive a card with EMV and NFC support. According to the product description, the malware exploits a vulnerability in the service, allowing it to illegally obtain bitcoins worth up to 6,750 euros, dollars or pounds sterling. The cost of the malware is $ 25,000.

The same vendor also offers malware for conventional EMV ATMs. According to the description, using a vulnerability in the menu, the malware disconnects the machine from the network in order to deactivate the alarm.

EMV is an international standard for bank card transactions with a chip. The main difference for the user of an EMV card is the predominant requirement to enter a PIN code when making any payment through the terminal. However, if desired, the issuing bank can configure the CVM list of the chip card so that first of all it will request a signature.