Slashdot Mirror


First 'Jackpotting' Attacks Hit US ATMs (krebsonsecurity.com)

Brian Krebs, reporting for Krebs on Security: ATM "jackpotting" -- a sophisticated crime in which thieves install malicious software and/or hardware at ATMs that forces the machines to spit out huge volumes of cash on demand -- has long been a threat for banks in Europe and Asia, yet these attacks somehow have eluded U.S. ATM operators. But all that changed this week after the U.S. Secret Service quietly began warning financial institutions that jackpotting attacks have now been spotted targeting cash machines here in the United States.

To carry out a jackpotting attack, thieves first must gain physical access to the cash machine. From there they can use malware or specialized electronics -- often a combination of both -- to control the operations of the ATM. On Jan. 21, 2018, KrebsOnSecurity began hearing rumblings about jackpotting attacks, also known as "logical attacks," hitting U.S. ATM operators. I quickly reached out to ATM giant NCR Corp. to see if they'd heard anything. NCR said at the time it had received unconfirmed reports, but nothing solid yet.

4 of 101 comments (clear)

  1. Re:Windows XP in ATMs by Anonymous Coward · · Score: 3, Informative

    Windows XP is no more childish or retarded than Linux or any other OS. If someone has physical access to a computer it makes no difference what operating system it is running.

  2. Re:But why?? by beelsebob · · Score: 3, Informative

    What makes you think you can take money out of the machine without the software install?

    Cracking safes, quickly and quietly with no one noticing is really hard. Sticking a USB stick with some malware on it into a port and leaving, without anyone noticing is pretty trivially easy.

  3. Deja Vu! by Gravis+Zero · · Score: 2, Informative

    Pro tip from Europe...
    Culprits are Romanians. they are born with a propensity for card crime. they are filthy animals.

    That's super weird, bro because I recently got a similar warning from home.

    Pro tip from Vulcan...
    Culprits are Humans. They are born with a propensity for crime, violence and other illogical behavior. They are filthy animals.

    --
    Anons need not reply. Questions end with a question mark.
  4. Re:chase bank has ADT/tyco key pads inside them by Anonymous Coward · · Score: 2, Informative

    chase bank has ADT/tyco key pads inside them so you need to disarm that when you open them.

    The sketchy looking ATMs in stores are the primary target. The criminals can get their hands on them and fuzz them all day to develop the attack.