Tuesday, March 25, 2014

Send a text message to an ATM - Then collect Cash (from someone else's account)


 I am not sure how easy it will be to connect a Cell phone to a ATM. However, this attack has been successful.



According to the article:- 

A new technique that has been discovered is the use of mobile technology to control an ATM remotely. The threat, Backdoor.Ploutus, was originally discovered in Mexico but is now available in the English language, suggesting that the new variation -- Backdoor.Ploutus.B -- is expanding to other countries.

By simply sending a text message to the compromised system, hackers can control the ATM, walk up to it, and collect dispensed cash

BUT -  First. the attacker must connect the ATM to a mobile phone via USB tethering.

While modern ATMs often have enhanced security, including encrypted hard drives, models running on Windows XP are not protected well against these types of attacks. In addition, while money is usually locked away inside a safe, the computer system often is not -- leaving the access point to cash vulnerable.


The links below has more information:

No comments:

Post a Comment