ATM Theft Scenario: You insert your ATM card and your card is not returned (it happens) but, it will be given to the next guy who accesses the ATM (very bad). What if this is deliberately done by a Malware (named "Suceful") to steal your card (+ data) and give it to the bad guy.

Fact is Stranger than fiction.


From the article:

This particular sample can read all the credit/debit card track data and data from the card's chip (if the card has one), retain or eject the inserted card on demand, and can be controlled by the attackers via the ATMs PIN pad.

The malware is also capable of disabling the ATMs door, alarm and proximity sensors to prevent malicious activities from being detected.

While it's impossible for ATM users to spot a compromised machine, they are advised to be suspicious of machines that retain their cards. Giving a call to the bank if that happens is always a good idea, preferably while keeping an eye on the ATM in order to spot attempts by suspicious individuals to retrieve the card from the machine.

For more info:
http://www.net-security.org/malware_news.php?id=3098

Those who prefer Mobile Banking might want to read this.

Mobile malware designed to steal bankcard information and funnel money from bank accounts increased by a factor of nearly 20 times in the past year

SNIPPETS from the Article:-

Because mobile banking provides the easiest way for criminals to steal money, it provides the largest target for criminals

According to Kaspersky Labs, the countries with the highest number of unique attacked users are Russia (40%), India (8%), Vietnam (4%), Ukraine (4%) and the UK (3%). However, mobile malware targeting banking specifically is expected to grow in other countries this year.

The links below has more information:

https://blog.cyveillance.com/malware/mobile-malware-banking-trojans-that-steal-your-money