Malware is Making ATMs ’Spit Cash

A Russian cybersecurity firm has issued a warning about a spate of remotely coordinated attacks on cash machines.

 

Hacks of banks’ centralised systems had made groups of machines issue cash simultaneously, a process known as "touchless jackpotting", said Group IB.

 

The machines had not been physically tampered with, it said, but "money mules" had waited to grab the cash.

 

Affected countries are said to include Armenia, Estonia, the Netherlands, Poland, Russia, Spain and the UK.

 

But the company declined to name any specific banks.

 

Dmitriy Volkov from Group IB told the BBC a successful attack could net its perpetrators up to $400,000 at a time.

 

"We have seen such attacks in Russia since 2013," he said.

 

"The threat is critical. Attackers get access to an internal bank’s network and critical information systems. "

 

A recent report by Europol warned of the rise of cash-machine-related malware- using hardware to steal card information at the machine itself - was still more common.

 

"The new method is being done by somehow gaining access to the banks’ central systems and infecting whole communities of ATMs simultaneously, hence multiplying the amount of money that can be stolen in a short time," said Surrey University’s cybersecurity expert Prof Alan Woodward.

 

Because criminals were collecting the cash in person, it made the crime more difficult to trace, he added.