{"id":15977,"date":"2019-08-02T08:10:17","date_gmt":"2019-08-02T16:10:17","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/08\/02\/news-9721\/"},"modified":"2019-08-02T08:10:17","modified_gmt":"2019-08-02T16:10:17","slug":"news-9721","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/08\/02\/news-9721\/","title":{"rendered":"Everything you need to know about ATM attacks and fraud: part 2"},"content":{"rendered":"

Credit to Author: Jovi Umawing| Date: Fri, 02 Aug 2019 15:00:00 +0000<\/strong><\/p>\n

This is the second and final installment of our two-part series on automated teller machine (ATM) attacks and fraud.<\/p>\n

In part 1<\/a>, we identified the reasons why ATMs are vulnerable\u2014from inherent weaknesses of its frame to its software\u2014and delved deep into two of the four kinds of attacks against them: terminal tampering and physical attacks.<\/p>\n

Terminal tampering has many types, but it involves either physically manipulating components of the ATM or introducing other devices to it as part of the fraudulent scheme. Physical attacks, on the other hand, cause destruction to the ATM and to the building or surrounding area where the machine is situated.<\/p>\n

We have also supplied guidelines for users\u2014before, during, and after\u2014that will help keep them safe when using the ATM.<\/p>\n

For part 2, we\u2019re going to focus on the final two types of attacks: logical attacks and the use of social engineering<\/a>.<\/p>\n

Logical ATM attacks<\/h3>\n

As ATMs are essentially computers, fraudsters can and do use software as part of a coordinated effort to gain access to an ATM’s computer along with its components or its financial institution’s (FI’s) network. They do this, firstly, to obtain cash; secondarily, to retrieve sensitive data from the machine itself and strip or chip cards; and lastly, intercept data they can use to conduct fraudulent transactions.<\/p>\n

Enter logical attacks\u2014a term synonymous with jackpotting<\/em> or ATM cash-out attacks<\/em>. Logical attacks involve the exploitation and manipulation of the ATM\u2019s system using malware or another electronic device called a black box. Once cybercriminals gain control of the system, they direct it to essentially spew cash until the safe empties as if it were a slot machine.<\/p>\n

The concept of “jackpotting” became mainstream after the late renowned security researcher Barnaby Jack<\/a> presented and demoed his research on the subject at the Black Hat security conference in 2010<\/a>. Many expected ATM jackpotting to become a real-world problem since then. And, indeed, it has\u2014in the form of logical attacks.<\/p>\n

In order for a logical attack to be successful, access to the ATM is needed. A simple way to do this is to use a tool, such as a drill, to make an opening to the casing so criminals can introduce another piece of hardware (a USB stick, for example) to deliver the payload. Some tools can also be used to pinpoint vulnerable points within the ATM\u2019s frame or casing, such as an endoscope, which is a medical device with a tiny camera that is used to probe inside the human body.<\/p>\n

If you think that logical attacks are too complex for the average cybercriminal, think again. For a substantial price, anyone with cash to spare can visit Dark Web forums and purchase ATM malware complete with easy how-to instructions. Because the less competent ATM fraudsters can use malware created and used by the professionals, the distinction between the two blurs.<\/p>\n

Logical attack types<\/h4>\n

To date, there are two sub-categories of logical attacks fraudsters can carry out: malware-based attacks and black box attacks.<\/p>\n

Malware-based attacks.<\/strong> As the name suggests, this kind of attack can use several different types of malware, including Ploutus, Anunak\/Carbanak, Cutlet Maker, and SUCEFUL, which we’ll profile below. How they end up on the ATM\u2019s computer or on its network is a matter we should all familiarize ourselves with.<\/p>\n

Installed at the ATM\u2019s PC:<\/em><\/p>\n