When you think of an Automated Teller Machine, you think of security, right? If the first thing you think of is "skimmer" devices built to steal your debit card information, then you've probably been reading some of my latest security updates. Now there's something even scarier that just hit the market, and it's spreading out from Eastern Europe. This vulnerability is just about ready to cross the border.
Well, it turns out that Malaysian gangs have been installing malware into "unattended" ATMs and have tricked the machines into spitting out more than $1 million. That's right, hackers don't have to saw open an ATM machine, they only have to install malware onto an ATM to "jackpot" the machine.
Instead of stealing your credit card data, however, hackers simply target the machine itself. "You don’t have to be an ATM expert or have inside knowledge to generate or code malware for ATMs." said Owen Wild of global ATM manufacturer NCR in an interview with Brian Krebs of KrebsOnSecurity.
He went on to claim that hackers didn't have to install "skimmer" system anymore, and instead were just opting to crack a machine far enough to install malware that told the ATM to shoot as much money out as it could.