Metel Hackers Roll Back ATM Transactions, Steal Millions (threatpost.com)

Posted by timothy on Monday February 8, 2016 @05:48AM from the not-metal-mettle-meddle-or-medal dept.

msm1267 writes: Researchers from Kaspersky Lab's Global Research & Analysis Team today unveiled details on two new criminal operations that have borrowed heavily from targeted nation-state attacks, and also shared an update on a resurgent Carbanak gang, which last year, it was reported, had allegedly stolen upwards of $1 billion from more than 100 financial companies. The heaviest hitter among the newly discovered gangs is an ongoing campaign, mostly confined to Russia, known as Metel. This gang targets machines that have access to money transactions, such as call center and support machines, and once they are compromised, the attackers use that access to automate the rollback of ATM transactions. As the attackers empty ATM after ATM—Metel was found inside 30 organizations—the balances on the stolen accounts remained untouched.

2 of 73 comments (clear)

Min score:

Reason:

Sort:

Re:Roll-back as in play-back? by Lord+Crc · 2016-02-08 06:05 · Score: 5, Insightful

I read it as they rollback in the database sense, so that the account still has money and they just make repeat withdrawals until the machine is empty.
Fuck the banks by Anonymous Coward · 2016-02-08 08:30 · Score: 2, Insightful

This is awesome.
The bank still has the same digital balance, it just doesn't have the physical notes any more.
It's the perfect victimless crime.