Slashdot Mirror
Bank Employee Plants Malware on ATMs
Wired's Threat Level has a piece on a Bank of America employee, Rodney Reed Caverly, who has been charged with installing malware on ATMs in North Carolina. Caverly, who worked on the bank's IT staff, allegedly withdrew cash untraceably from the ATMs over a period of 7 months last year. "The charges were filed the same day that credit card company Visa warned the banking industry that Eastern European ATM malware recently showed up in America for the first time. That code, initially spotted last year on some 20 ATMs in Russia and Ukraine, was designed primarily to capture PINs and bank card magstripe data, but also allowed thieves to instruct the machine to eject whatever cash was still in it... At least 16 versions of the East European malware have been found so far and were designed to attack ATMs made by Diebold and NCR, according to the April 1 Visa alert. There is no information tying the malware found in Russia with the malware allegedly used by Caverly."
Actually, what some of these CEO's did was pretty plainly illegal. See - Lehman Brothers and the use of Repo 105. NY Times has a good breakdown. You can find it here: http://dealbook.blogs.nytimes.com/2010/03/12/the-british-origins-of-lehmans-accounting-gimmick/ Even their own internal legal review determined that the practice was illegal in the US, hence the need to do it secretly in England.
Well as an aside, it is windows XP embedded kiosk edition, but other than that, its the stock banana, so all the viruses and back doors will still work as written.
What you're supposed to do is return them to the bank or contact the secret service and turn the money over. However, you're not reimbursed for this. If the ATM gives you a fake $20 and you go inside and give it to the bank, you're out those $20 because they didn't witness what happened between you getting the money and you coming inside the bank. Knowing that, what you do with the counterfeit money is sort of up to you. Maybe you didn't realize it was counterfeit and will spend it anyways. It's best to withdraw cash from inside the bank and verify it in front of the teller, because if they see that you didn't swap any bills and you were given a fake by them, they will exchange it.