This talk tells a story about a targeted attack on a bank that occurred earlier this year in Mexico. The case is interesting in many ways: unusual ATM malware, an unusual modus operandi, and a prime example of an OPSEC fail on the part of the victim, with a surprising twist at the end.