Jump to content

ATM makers warn of 'jackpotting' hacks on U.S. machines


lurch234

Recommended Posts

ATM makers warn of 'jackpotting' hacks on U.S. machines

 

(Reuters) - Diebold Nixdorf Inc and NCR Corp, two of the world’s largest ATM makers, have warned that cyber criminals are targeting U.S. cash machines with tools that force them to spit out cash in hacking schemes known as “jackpotting.”

 

The two ATM makers did not identify any victims or say how much money had been lost. Jackpotting has been rising worldwide in recent years, though it is unclear how much cash has been stolen because victims and police often do not disclose details.

 

The attacks were reported earlier on Saturday by the security news website Krebs on Security, which said they had begun last year in Mexico.

 

The companies confirmed to Reuters on Saturday they had sent out the alerts to clients.

 

NCR said in a Friday alert that the cases were the first confirmed “jackpotting” losses in the United States. It said its equipment had not been targeted in the recent attacks, but that it was still a concern for the entire ATM industry.

 

“This should be treated by all ATM deployers as a call to action to take appropriate steps to protect their ATMs against these forms of attack,” the alert said.

 

Diebold Nixdorf said in a separate Friday alert that U.S. authorities had warned the company that hackers were targeting one of its ATM models, known as Opteva, which went out of production several years ago.

 

A confidential U.S. Secret Service alert sent to banks said the hackers targeted stand-alone ATMs typically located in pharmacies, big box retailers and drive-thru ATMs, Krebs on Security reported.

 

Diebold Nixdorf’s alert described steps that criminals had used to compromise ATMs. They include gaining physical access, replacing the hard drive and using an industrial endoscope to depress an internal button required to reset the device.

 

Reuters was unable to obtain a copy of the Secret Service report and an agency representative declined comment. Officials with the Federal Bureau of Investigation could not immediately be reached.

 

Russian cyber security firm Group IB has reported that cyber criminals remotely attacked cash machines in more than a dozen countries across Europe in 2016. Similar attacks were also reported that year in Thailand and Taiwan.

 

Source

Link to comment
Share on other sites


  • Replies 5
  • Views 809
  • Created
  • Last Reply

When most aging ATM machines still runs under windows 98/95 OSes, the problems hacking on these machines' vulnerabilities will still be rampant.

No one even needs to hack the banking software in there.

Link to comment
Share on other sites


On 1/28/2018 at 2:30 PM, nIGHT said:

When most aging ATM machines still runs under windows 98/95 OSes, the problems hacking on these machines' vulnerabilities will still be rampant.

No one even needs to hack the banking software in there.

 

I haven't seen an ATM machine running 98/95 in over 15 years.  Windows XP has been the OS of choice.

 

On 1/28/2018 at 8:16 AM, lurch234 said:

Diebold Nixdorf’s alert described steps that criminals had used to compromise ATMs. They include gaining physical access, replacing the hard drive and using an industrial endoscope to depress an internal button required to reset the device.

 

This only works if it is an inside job.  No one is going to see someone changing a hard drive in an ATM or poking a wire into and not notify someone about it.  

Link to comment
Share on other sites


  • 2 weeks later...
On 1/30/2018 at 7:18 AM, straycat19 said:

I haven't seen an ATM machine running 98/95 in over 15 years.  Windows XP has been the OS of choice.

You are in USA.
Go to Asia, you will be shocked and awe on how stupid these banks are due to their being way too thrifty or greedy.

Also, a lot of these "hacking" or robbery frequently happens on friday night that is why they are mostly named as "friday group."

Since most banks will open on the monday, they won't know they were already been rob on that day.

Link to comment
Share on other sites


Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...