ATM makers warn of 'jackpotting' hacks on U.S. machines

rueters ^

[BenLurkin]

Diebold Nixdorf Inc and NCR Corp, two of the world’s largest ATM makers, have warned that cyber criminals are targeting U.S. cash machines with tools that force them to spit out cash in hacking schemes known as “jackpotting.”

...

NCR said in a Friday alert that the cases were the first confirmed “jackpotting” losses in the United States. It said its equipment had not been targeted in the recent attacks, but that it was still a concern for the entire ATM industry.

“This should be treated by all ATM deployers as a call to action to take appropriate steps to protect their ATMs against these forms of attack,” the alert said. Diebold Nixdorf said in a separate Friday alert that U.S. authorities had warned the company that hackers were targeting one of its ATM models, known as Opteva, which went out of production several years ago.

A confidential U.S. Secret Service alert sent to banks said the hackers targeted stand-alone ATMs typically located in pharmacies, big box retailers and drive-thru ATMs, Krebs on Security reported.

Diebold Nixdorf’s alert described steps that criminals had used to compromise ATMs. They include gaining physical access, replacing the hard drive and using an industrial endoscope to depress an internal button required to reset the device.

[Paladin2]

I hate that the current slot machines don’t dispense real money.

I can see the attraction of ATMs.

[Yaelle]

How does this work when they all have cameras?

[Revel]

Diebold- Where have I seen that name before. I guess there ATM’s are a since to hack too.

[DUMBGRUNT]

Officials with the Federal Bureau of Investigation could not immediately be reached.

All available agents were busy plotting against their government.

[montag813]

I would love to collect some ATM jackpots in Mexico. the big banks are run by the families of the last 3 corrupt presidents.

[Alas Babylon!]

All available agents were busy sexting their mistresses.

[cynwoody]

Krebs' article:

https://krebsonsecurity.com/2018/01/first-jackpotting-attacks-hit-u-s-atms/

“In previous Ploutus.D attacks, the ATM continuously dispensed at a rate of 40 bills every 23 seconds,” the alert continues. Once the dispense cycle starts, the only way to stop it is to press cancel on the keypad. Otherwise, the machine is completely emptied of cash, according to the alert.

[ProtectOurFreedom]

Once the dispense cycle starts, the only way to stop it is to press cancel on the keypad.

I will be absolutely sure to remember this "fix."

[Oscar in Batangas]

Hmmmm
Diebold Nixdorf

Makes you wonder if their ‘cousin’ machines can be programmed to dispense democrat candidate votes until the voter registration rolls in a state are depleted???

[D Rider]

Diebold went on to say, “It’s the same basic flaw that allows hacker’s to change the votes in our voting machines.”