956 matches found
Latin American ATM Thieves Turning to Hacking
MADRID—ATM jackpotting is hardly a novelty act in Latin America where criminals are more than ever connecting with hackers to figure out how to more efficiently steal money from an automated teller than, say, by using a stick of dynamite. No, it’s not uncommon to hear about thefts in Brazil,...
Remote Malware Attacks on ATMs
This report discusses the new trend of remote malware attacks against ATMs...
The vulnerability of the application-based Checker ATM Security, which provides protection for banknote processing platforms and networks, arises from an operation that goes beyond the buffer in memory, allowing attackers to execute arbitrary code.
The vulnerability of the Checker ATM Security application, which provides protection for banknote processing systems and networks, arises from operations that go beyond the buffer in memory buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using...
Attack The Machines: The lucrative business of ATM malware
Trend Micro and Europol’s European Cybercrime Centre EC3 today released a publicly available report on the ATM malware landscape. This builds on the 2016 report that was privately released to financial institutions and law enforcement agencies globally. The report digs into the depth and breadth ...
419 spam: 10 million US dollars, courtesy of “Rev. Goodluck Ebola”
I'm not saying an email claiming to be from the "Central Bank of Nigeria" with a contact handler named "Rev. Goodluck Ebola" will raise too many red flags, but… Click to Enlarge CENTRAL BANK OF NIGERIA OFFICE OF THE GOVERNOR Zaria Street, Off Samuel Akintola Street,Garki 11, Garki-Abuja. Our Ref:...
Dumping Data from Deep-Insert Skimmers
I recently heard from a police detective who was seeking help identifying some strange devices found on two Romanian men caught maxing out stolen credit cards at local retailers. Further inspection revealed the devices to be semi-flexible data transfer wands that thieves can use to extract stolen...
Thieves Used Infrared to Pull Data from ATM ‘Insert Skimmers’
A greater number of ATM skimming incidents now involve so-called "insert skimmers," wafer-thin fraud devices made to fit snugly and invisibly inside a cash machine’s card acceptance slot. New evidence suggests that at least some of these insert skimmers -- which record card data and store it on a...
So You Think You Can Spot a Skimmer?
This week marks the 50th anniversary of the automated teller machine -- better known to most people as the ATM or cash machine. Thanks to the myriad methods thieves have devised to fleece unsuspecting cash machine users over the years, there are now more ways than ever to get ripped off at the AT...
A week in security (Jun 12 – Jun 18)
Last week was very busy for the Labs, with a look at so-called numeric tech support scams, a visit to the huge Infosec Europe conference, an exploration of Mac Malware as a Service, and a walk through the myths of online bullying. Elsewhere: A huge click-farm is busted Jaff Ransomware is thwarted...
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 1, 2017
As you read this blog, I am probably sitting on a beach in Cancun, Mexico getting a nice tan and not thinking about security well, maybe just a little. A couple of days before I left, I had to deal with the inevitable. It never fails – every time I am about to go on vacation, the urgency of thing...
GMV Checker ATM Security Arbitrary Code Execution Vulnerability
GMV Checker ATM Security is a dedicated ATM security product providing hard disk encryption. A security vulnerability exists in versions prior to GMV Checker ATM Security 5.0.18. A remote attacker can exploit the vulnerability to execute arbitrary code...
Code injection
GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka PT-2017-03...
CVE-2017-6968
GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka PT-2017-03...
CVE-2017-6968
GMV Checker ATM Security Before 5.0.18 is affected by a buffer‑overflow vulnerability described in PT-2017-03. A remote authenticated attacker can trigger arbitrary code execution, with the advisory noting exploitation via a spoofed control server. The CVE records confirm the vulnerable version r...
CVE-2017-6968
GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka PT-2017-03...
Hackers stole $800,000 from ATMs using Fileless Malware
Hackers targeted at least 8 ATMs in Russia and stole $800,000 in a single night, but the method used by the intruders remained a complete mystery with CCTV footage just showing a lone culprit walking up to the ATM and collecting cash without even touching the machine. Even the affected banks coul...
Security Analyst Summit 2017 Day One Recap
SINT MAARTEN—Mike Mimoso and Chris Brook recap the first day of this year’s Security Analyst Summit, including Mark Dowd’s memory corruption bug keynote, Thomas Rid, Daniel Moore, Juan Andres Guerrero-Saade, and Costin Raiu’s Moonlight Maze talk, ATM hacking, and the Lazarus APT. Download:...
Tcpdump ATM Parser Buffer Overflow Vulnerability
Tcpdump is a popular network analysis program. Tcpdump ATM parser print-atm.c:sigprint suffers from a buffer overflow vulnerability that could be exploited by a remote attacker to crash an application by submitting a special request...
Internet Bug Bounty: CVE-2017-5484 The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print()
Reported to the project maintainers in 2016. The function sigprint did receive a correct caplen parameter value but didn't use it correctly which could result in a read outside of buffer. Fixed by https://github.com/the-tcpdump-group/tcpdump/commit/5d214e36eed3565fbdc0f9b527bbc33a6bb63972...
