Don't blow-up the safe! Use software silly... An in-depth study of ATM Malware

No ratings

Presented at BSidesVancouver 2017 by

Numaan Huq

An overly simplistic yet accurate description of an Automated Teller Machine (ATM) is: a computer system connected to a secure vault and the whole setup encased inside a housing unit; the computer accepts user input and dispenses cash from the vault. The time-tested way of robbing a Bank's ATM was to blow it up with explosives. Now criminal gangs have figured out how to infect ATMs with custom malware, which then instructs the ATM to dispense all the stored cash. This is a relatively easy, discrete, and persistent way of jackpotting ATMs