Attack The Machines: The lucrative business of ATM malware

Trend Micro and Europol’s European Cybercrime Centre EC3 today released a publicly available report on the ATM malware landscape. This builds on the 2016 report that was privately released to financial institutions and law enforcement agencies globally. The report digs into the depth and breadth ...

Dumping Data from Deep-Insert Skimmers

I recently heard from a police detective who was seeking help identifying some strange devices found on two Romanian men caught maxing out stolen credit cards at local retailers. Further inspection revealed the devices to be semi-flexible data transfer wands that thieves can use to extract stolen...

GMV Checker ATM Security Arbitrary Code Execution Vulnerability

GMV Checker ATM Security is a dedicated ATM security product providing hard disk encryption. A security vulnerability exists in versions prior to GMV Checker ATM Security 5.0.18. A remote attacker can exploit the vulnerability to execute arbitrary code...

Code injection

GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka PT-2017-03...

CVE-2017-6968

GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka PT-2017-03...

CVE-2017-6968

GMV Checker ATM Security Before 5.0.18 is affected by a buffer‑overflow vulnerability described in PT-2017-03. A remote authenticated attacker can trigger arbitrary code execution, with the advisory noting exploitation via a spoofed control server. The CVE records confirm the vulnerable version r...

PT-2017-03: Buffer Overflow in Checker ATM Security

The specialists of the Positive Research center have detected a Buffer Overflow vulnerability in hecker ATM Security. An attacker able to spoof the control server can cause a buffer overflow and execute arbitrary code. How to fix Update your software up to the latest version Advisory status...

Hackers Steal Millions From European ATMs Using Malware That Spit Out Cash

ATM hackers who long relied on tactics of stealing payment card numbers and online banking credentials to steal millions are now targeting the bank itself to steal cash directly from the machines. Earlier this year, a gang of cyber criminals infected several ATMs with malware in Taiwan and Thaila...

Report: German Bank ATMs vulnerable to Hackers

Avoiding Credit Card Fraud is simply easy as long as you use cash. But, what if you even get hacked while withdrawing cash from an ATM? If you are living in Germany or traveling there, then think twice before using your payment cards in the ATMs. Here’s why: A Security researcher in Germany has...

Smart ATM offers Cardless Cash Withdrawal to Avoid Card Skimmers

Banks have tried every effort, from providing Magnetic Stripes based Credit and Debit Cards to Chip-and-Pin Cards, in order to secure its users from credit card cloning and card Skimmers. It has been known from years that Magnetic stripe are incredibly hackable, but Chip-n-Pin cards have also bee...

Tyupkin ATM Malware Discovered by Kaspersky Lab

Criminals in Eastern Europe have evolved their attacks against automated teller machines, moving beyond solely targeting consumers with card skimmers that steal debit card numbers, to attacks against banks using malware that allows someone to remove money directly from an ATM without the need for...

Hacker jailed for ATM skimming invented ATM security scheme

A Romanian man serving a five-year jail sentence in Romania for his involvement in an ATM skimming scheme, has developed a device designed to protect ATMs from such attacks. 33-year-old Valentin Boanta who is being detained in a prison from Vaslui, Romania, after he was convicted on charges of ba...

Hacker jailed for ATM skimming invented ATM security scheme

A Romanian man serving a five-year jail sentence in Romania for his involvement in an ATM skimming scheme, has developed a device designed to protect ATMs from such attacks. 33-year-old Valentin Boanta who is being detained in a prison from Vaslui, Romania, after he was convicted on charges of ba...

Remotely Jackpotting ATMs

This video from the Black Hat USA 2010 conference shows IOActive researcher Barnaby Jack demonstrating his ability to remotely attack ATMs and force them to dispense all of their cash...

Hacker Demos Remote Attacks Against ATMs

LAS VEGAS — Using home-brewed software tools and exploiting a gaping security hole in the authentication mechanism used to update the firmware on automated teller machines ATMs, a security researcher hacked into ATMs made by Triton and Tranax and planted a rootkit that dispensed cash on demand...

Fraudsters Trying to Capture Bank Cards at Machines

If your cash card gets eaten by the automated-teller machine, it may not end up in the hands of a bank employee. European financial institutions are seeing a sharp rise in card “trapping,” where criminals use various tricks in order to capture and retrieve a person’s ATM card for fraudulent use...

The Difficulty of Un-Authentication

By Bruce Schneier In computer security, a lot of effort is spent on the authentication problem. Whether it’s passwords, secure tokens, secret questions, image mnemonics, or something else, engineers are continually coming up with more complicated — and hopefully more secure — ways for you to prov...