Slashdot Mirror
Flash Mob Steals $9 Million From ATMs
Mike writes "A global flash mob of ATM thieves netted $9 million in fraud against ATMs in 49 cities around the world. The computer system for a company called RBS WorldPay was hacked. One service of the company is the ability for employers to pay employees with the money going directly to a debit card that can be used in any ATM. The hacker was able to infiltrate the supposedly secure system and steal the information necessary to duplicate or clone people's ATM cards. Shortly after midnight Eastern Time on November 8, the FBI believes that dozens of the so-called cashers were used in a coordinated attack on ATMs around the world. Over 130 different ATMs in 49 cities worldwide were accessed in a 30-minute period on November 8. 'We've never seen one this well coordinated,' the FBI said. So far, the FBI has no suspects and has made no arrests (PDF) in this scam."
I thought flash mobs are groups of people in the same place at the same time. Not all over the world?
By the name, I suppose a flash mob suggests a mob of people doing something 'in a flash' (in a short period of time).
A mob doesn't necessarily have to be in the same spot, at least it doesn't have to be the way I understand it.
Perhaps in the past a mob would have to be in the same location, but due to the way the world is all interlinked nowadays someone can affect something on the otherside of the world, meaning the world has gotten a lot 'smaller' as such.
It was probably structured like a lot of the stolen credit-card number sites: a high-reputation user announces an opportunity, then many other users pay up-front to participate. At the given time, the critical info is released to all, and it's then every man for himself trying to grab as much money as possible.
Two excellent analogies. I've been looking at corporations (in the broad sense) for 30 years, and it took me a long time to realize that you might as well ignore what people say about how they organize, and just look at what the organization actually is. That tells you almost everything you need to know.
May I be so bold to suggest that there was no actual "hacking" taking place at all?
By "hacking" I mean the stuff that movies and TV tells us that hacking looks like.
A bespectacled nerd in his teens or early twenties, furiously typing something at his green and black screen filled with lines upon lines of scrolling text, uttering "Come on... come on..." until he suddenly "hacks the Gibson" and a welcome screen appears, upon which he jumps up yelling "YES! I AM INVINCIBLE!".
TFA tells us the following:
Here is the amazing part: With these cashers ready to do their dirty work around the world, the hacker somehow had the ability to lift those limits we all have on our ATM cards. For example, I'm only allowed to take out $500 a day, but the cashers were able to cash once, twice, three times over and over again. When it was all over, they only used 100 cards but they ripped off $9 million.
- known limit - $500
- 100 ATMcards used
- $9 million gone
That comes out to about 90k per card, right?
Does anyone remember that little issue with Tranax ATMs from couple of years ago?
It smells to me that something similar happened here. Someone leaving the ADMIN pass at 55555555 or 12345678.
There was probably no need for hacking cards - they probably left the same limit.
Instead, he/she/or it - just changed the codes for banknotes inside the machine.
So... you just tell the ATM that its 100s are 5s - and then repeatedly ask for 5s.
$500 limit coughs up ~$100.000 +/- couple of earlier withdrawals that already left the machine a few 100s short.
In other words - about $90.000 per card.
The beauty of it?
Those suspects in the photos may be regular Joes and Janes who came later, found the machine giving 100s for 5s - and got caught on camera.
Mit der Dummheit kämpfen Götter selbst vergebens