Slashdot Mirror
First 'Jackpotting' Attacks Hit US ATMs (krebsonsecurity.com)
Brian Krebs, reporting for Krebs on Security: ATM "jackpotting" -- a sophisticated crime in which thieves install malicious software and/or hardware at ATMs that forces the machines to spit out huge volumes of cash on demand -- has long been a threat for banks in Europe and Asia, yet these attacks somehow have eluded U.S. ATM operators. But all that changed this week after the U.S. Secret Service quietly began warning financial institutions that jackpotting attacks have now been spotted targeting cash machines here in the United States.
To carry out a jackpotting attack, thieves first must gain physical access to the cash machine. From there they can use malware or specialized electronics -- often a combination of both -- to control the operations of the ATM. On Jan. 21, 2018, KrebsOnSecurity began hearing rumblings about jackpotting attacks, also known as "logical attacks," hitting U.S. ATM operators. I quickly reached out to ATM giant NCR Corp. to see if they'd heard anything. NCR said at the time it had received unconfirmed reports, but nothing solid yet.
To carry out a jackpotting attack, thieves first must gain physical access to the cash machine. From there they can use malware or specialized electronics -- often a combination of both -- to control the operations of the ATM. On Jan. 21, 2018, KrebsOnSecurity began hearing rumblings about jackpotting attacks, also known as "logical attacks," hitting U.S. ATM operators. I quickly reached out to ATM giant NCR Corp. to see if they'd heard anything. NCR said at the time it had received unconfirmed reports, but nothing solid yet.
Windows XP in ATMs
Moronic idea.
Windows is a toy for (rather retarded) children. Period.
chase bank has ADT/tyco key pads inside them so you need to disarm that when you open them.
Bunch of pussies. In the UK, they dig the damn thing out with a backhoe
http://www.bbc.co.uk/news/av/u...
slot machines make it hard to open with out setting off an alert so why do AMT have less of that stuff?
This is yet more proof that we need all software to be written in the Rust programming language. We need full stack Rust for high security situations like ATMs. Any firmware should be written in Rust. The OS should be written in Rust. The application software should be written in Rust. Rust is the only programming language around that has move semantics, guaranteed memory safety, threads without data races, and a minimal runtime. That's why we need to be using Rust for software where security matters, which really means that we should be using Rust for all software.
So, if I have physical access to the machine, I can install software that lets me loot the machine.
Or, if I have physical access to the machine, I can just take all the money out of the machine without bothering with the software install.
I'm failing to see this as a serious new threat to ATM's....
"I do not agree with what you say, but I will defend to the death your right to say it"
Having worked for a bank's front-end, our major financial institutions have their butts pretty much covered if they so much as lose a single bill from an ATM. Maybe those smaller ATM's that can be found at mom-and-pop stores, bodegas as they're called here in the tri-state area, convenience or dollar stores, provide a much easier target i.e. low-hanging fruit
Fuckwit retard
slot machines make it hard to open with out setting off an alert so why do AMT have less of that stuff?
They don't. I suspect that a lot of these attacks are inside jobs
Pro tip from Europe...
Culprits are Romanians. they are born with a propensity for card crime. they are filthy animals.
That's super weird, bro because I recently got a similar warning from home.
Pro tip from Vulcan...
Culprits are Humans. They are born with a propensity for crime, violence and other illogical behavior. They are filthy animals.
Anons need not reply. Questions end with a question mark.
We have the technology. I don’t mean cash free, but no money all together. So much time and effort such as hacking, stealing, mining (physical and crypto) that we could have a society based without it.
you are a faggot
You are brain dead
1) You meant to say 'Romani', a distinct ethnic group that isn't actually bound to the nation of Romania.
2) Still racist. Yep, there's higher crime rates with the Romani, probably because they're not particularly interested as a cultural group in integrating into their larger community. Which may be due to racists like you, who discriminate against them and remove the opportunity from many of those who would integrate if they could. Chicken and egg.
3) People who describe other people as 'filthy animals' are rarely the best of humanity. You're dehumanizing others as a justification for treating them like shit. Aren't you a wonderful person?
...at least in Europe and in the US thieves are sofisticated enough to hack the ATMs. In my country, they explode them. It's a security nightmare in smaller towns with insufficient police forces.
slot machines make it hard to open with out setting off an alert so why do AMT have less of that stuff?
The story I read earlier said that they're somehow able to replace the hard drive on some NCR ATMs without opening the device. However, the system doesn't just boot back up with the new HDD after that. They actually use an industrial endoscope to find a button inside of the device that lets it reset without opening it up. So it sounds like the device will alarm if you open it, but is poorly designed and you can replace key components and reset it without having to actually open it.
gypsies steal your goats? im surprised they have internet where ever you come from.
Link? Replacing an HD is as simple a process as pushing a reset button. The latter might be possible without opening but disconnecting and reconnecting an HD without getting your hands dirty sounds near impossible.
Fat, drunk, and stupid is no way to go through life, son.
Some prejudices are deeply rooted in reality. Americans usually call these people Gypsies. The have earned their association with scams and small time crime. Things like "Jackpotting" and pumping ATMs full of explosive gas and blowing them up to get to the cash require experience, so they're usually committed by groups where that experience can be shared. Gypsies also often abuse the law's leniency towards children by training them to commit petty theft and other small time property crime. And while I wouldn't call them animals, their disregard for public order also manifests in heaps of trash and damaged property whenever they leave for the next town to stay.
Don't think he did.
Confucius say, "Find worm in apple - bad. Find half a worm - worse."
It is understandable that Romani don't integrate, because there is so much bigotry against them in Europe, forcing them to band together. They tend to not be wanted in Europe's culture, no matter how they try, so wind up as outcasts, no matter how well they behave.
What is interesting is the fact that, Europeans tends to be just as racist, if not more so, than the US. In the US, overt racism tends to not happen because there are severe consequences, from losing one's job (and not ever being hirable again) to having their vehicle and home trashed, with the local police refusing to investigate because it was considered "justified". Europe, racism has no real social stigma.
You can call it racism all you want. These people are hated for their (often illegal and offensive) behavior, not their ancestry. Yes, it's prejudice, but what do you expect when the first thing you do in a new town is setting up an illegal camp and people read in the news that you left the last town you visited only when police threatened to dissolve the illegal camp by force, and that town was stuck with cleaning up after you? Sure, tell me more about your interesting culture then. I'm thrilled to hear it.
Utopia - Romanian-Romani Rant
We have the same thing here in the US. They are called "bum jungles", and are not limited to a race that "mainstream" people love bashing and showing their bigotry against. An illegal camp gets set up, the police really can't keep up with it, so don't bother until there are reports of physical injuries, or more important (at least in the US) damage to a business, so the popo busts up the camp, and the cycle repeats.
slot machines make it hard to open with out setting off an alert so why do AMT have less of that stuff?
The security in an ATM is mostly focused on protecting the cash box from physical attack, and from the maintenance tech. ATMs thus have two layers of security: something simple to allow maintenance of the "computer parts" of the ATM to be done cheaply, plus a much more robust inner layer to protect the cash from anyone but the guards from the armored car company. It's just old-school thinking about security.
It's also worth noting that there are still people who can open a slot machine, replace the ROM chip or whatever, and close the machine up again in a handful of seconds, before the alarm sounds. Sure, it's easier to update the FW on an ATM than a slot machine, but that only somewhat increases the time the attacker has before someone notices.
Socialism: a lie told by totalitarians and believed by fools.
Interesting. Though it's difficult to weigh the relative prejudice of calling one group vs. another 'filthy animals', there's at least more diversity among Romanians overall making it even more ill-informed to choose them. And there's less pre-existing prejudice against them making it more difficult to understand (not forgive) as a product of upbringing.
Culprits are Romanians.... they are filthy animals.
Found the Bulgarian.
Socialism: a lie told by totalitarians and believed by fools.
slot machines make it hard to open with out setting off an alert so why do AMT have less of that stuff?
It depends on the type of machine and the owner. Bank owned machines are usually alarmed and will go off even if you have the key, but forget to disarm the alarm. They also have motion sensors, I have seen the alarm set off by an upset customer that hits the machine a little too hard.
Too bad United States Federal Reserve Notes are less than zero value in actual terms.
Fiat money.
Fractional Reserve Banking System.
usdebtclock.org
Jews.
bank runs.
etc.
Wreck the Jews b4 it's too late. Exiled everywhere else already. Monopoly on all propaganda conduits and legal systems and financial institutions was not an accident or accident(s). It is an intentional infiltration and complex series of attempts to subvert the USA from the inside. Friend of Israel deez nuts thanks.
rekt. Fuck the Jews. Sucking freshly circumsized bloody baby penis (see youtube) and whirling chickens over their heads for their sins is weirdo shit straight up. Don't believe Noah's boat with 2 mosquitoes 2 eagles 2 chipmunks and 2 foxes either. Samson didn't lose any "power" from Delilah's haircut either. They will have you believe any old shit straight up. Deem Jews the Synagogue of Satan and delete. Thanks.
l8r. u know who this is spooks.
Hmm, maybe instead of reloading ATMs with cash, just have a "module" that is the real ATM that is drop-in-replaced into the "outside box" as needed.
The "outside box" would just handle the user interface and provide additional physical security.
The "module" would be very tamper-resistant. It would be taken to a controlled location to be reloaded. It would also have a time lock on it so it could not be accessed before it unlocked without causing obvious physical damage.
This wouldn't stop ATM thefts but it would make "I got physical access and pressed a switch to make it jackpot"-type attacks much harder if not impossible.
Bonus points if the ATM released a chemical to "ruin" all remaining currency inside if it was moved without some kind of authorization. If it worked, this alone would make attempts to steal the ATM or the "inside module" pretty useless.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
Many ATMs are in locations that don't have many eyes watching them for long periods of time. If you want to tinker with an ATM, in theory you could work in the middle of the night and spend minutes or hours without anyone getting suspicious. Sure, you might be on camera, but those are rarely monitored. Try tinkering with a slot machine or exhibiting any other suspicious behavior on a casino floor and employees are likely to notice you within moments and intercept you.
slot machines make it hard to open with out setting off an alert so why do AMT have less of that stuff?
The story I read earlier said that they're somehow able to replace the hard drive on some NCR ATMs without opening the device. However, the system doesn't just boot back up with the new HDD after that. They actually use an industrial endoscope to find a button inside of the device that lets it reset without opening it up. So it sounds like the device will alarm if you open it, but is poorly designed and you can replace key components and reset it without having to actually open it.
porously designed
Diebold. Not NCR. NCR hasn't been targeted by recent hacks.
I'm sure you wouldn't want someone to confuse your name with someone else's who got endoscoped and dumped his bowels without removing his pants.
Is that the same Diebold that makes the voting machines?
Ah! But the voting machines are designed to be hackable.
Did they use the code 790 to get the cash?
Star Trek, there maybe hope.
Why is it ill-informed? Not all Romanians are card-skimmers and not all card-skimmers are Romanian, but they're still vastly overrepresented in this form of crime relative to their percentage in the population.
Confucius say, "Find worm in apple - bad. Find half a worm - worse."
OS/2: More secure for your ATM, against jackpotting, than Windows XP.
Aren't they the lettuce people?
with my atari profilo!
On a long enough timeline, the survival rate for everyone drops to zero.