Friday, March 29, 2024

ATM Jackpotting – Attacker Can Compromise the ATM and Spit the Cash out – Attack now Hit U.S ATM’s

An ATM based cyber attack called Jackpotting now threatening the US ATM’s that leads an attacker to install the malicious software and sophisticated hardware into ATM and pull the huge volume of cash out from the ATM.

Initially, this Jackpotting attack appeared in Europe and Asia based bank operators now its moved into US based Bank ATM’s and the  U.S. Secret Service started warning about this attack on US based financial institutions ATM.

A few Months before sophisticated ATM skimming called “Shimmers”  targeted chip-based credit and Debit cards to steal your entire card information form POS(Point-of-sale) terminal

Attackers inject the Ploutus.D malware into the ATM machine and performing various Task for more than 10 days and based on the evidence Secret service believe that further attack is being planned across the country.

Ploutus.D malware is considering as one of the most advanced and sophisticated Malware in ATM-Based cyber attack history.

During Mid of this month, this attack is started and executed in many US ATM machines and attackers performing some logical attack which makes difficult to track them by the  Secret service.

Also Read: Advanced ATM Penetration Testing Methods

How Does this ATM Jackpotting Attack Works

To perform successful ATM Jackpotting Attack, cybercriminals First need to gain the Physical access to the targeting ATM Machine and the way attacker can use their malware or electronic hardware to control the ATM Machine.

This Attack is being Executed by fraudsters who is Pretending and dressed as an official  ATM technicians who carrying Laptop with a mirror image of the ATM operating System along with the mobile device.

once they access the ATM machine, they are gaining the main infrastructure of the terminal in order to infect the PC or completely changing the hard disk (HDD).

Later Original Hard disk will be replaced by another hard disk which is carried by the attacker and they are using unauthorized or stolen ATM based software.

Also, An Attacker Using a tool called slender that will help to look into the internal part of the cash machine and find the port where they attach the cord that later allows their laptop to connect with ATM computer.

According to krebsonsecurity Investigation report, Once this is complete, the ATM is controlled by the fraudsters and the ATM will appear Out of Service to potential customers,” reads the confidential Secret Service alert.
At this point, the crook(s) installing the malware will contact co-conspirators who can remotely control the ATMs and force the machines to dispense cash.
Once ATM starts to spit out the cash, Only way to stop it by press cancel on the keypad otherwise ATM will completely cashout from the ATM.
Website

Latest articles

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

GoPlus Labs, the leading Web3 security infrastructure provider, has unveiled a groundbreaking report highlighting...

Wireshark 4.2.4 Released: What’s New!

Wireshark stands as the undisputed leader, offering unparalleled tools for troubleshooting, analysis, development, and...

Zoom Unveils AI-Powered All-In-One AI Work Workplace

Zoom has taken a monumental leap forward by introducing Zoom Workplace, an all-encompassing AI-powered...

iPhone Users Beware! Darcula Phishing Service Attacking Via iMessage

Phishing allows hackers to exploit human vulnerabilities and trick users into revealing sensitive information...

2 Chrome Zero-Days Exploited at Pwn2Own 2024: Patch Now

Google has announced a crucial update to its Chrome browser, addressing several vulnerabilities, including...

The Moon Malware Hacked 6,000 ASUS Routers in 72hours to Use for Proxy

Black Lotus Labs discovered a multi-year campaign by TheMoon malware targeting vulnerable routers and...
Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Mitigating Vulnerability Types & 0-day Threats

Mitigating Vulnerability & 0-day Threats

Alert Fatigue that helps no one as security teams need to triage 100s of vulnerabilities.

  • The problem of vulnerability fatigue today
  • Difference between CVSS-specific vulnerability vs risk-based vulnerability
  • Evaluating vulnerabilities based on the business impact/risk
  • Automation to reduce alert fatigue and enhance security posture significantly

Related Articles