Follow Us

We use cookies to provide you with a better experience. If you continue to use this site, we'll assume you're happy with this. Alternatively, click here to find out how to manage these cookies

hide cookie message

Global ATMs affected by malware claims researcher

Networked ATMs could create more problems

Article comments

Cash machines are increasingly hosting malware able to harvest a person's card details for use in fraud, a situation that could worsen as the malware becomes more sophisticated, according to a security researcher.

Analysts at Trustwave's SpiderLabs research group were surprised earlier this year when it obtained the ATM malware sample from a financial institution in Eastern Europe, said Andrew Henwood, vice president of SpiderLabs's Europe, Middle East and Africa operation. Trustwave does forensic investigations for major credit card companies and financial institutions as well as penetration tests.

"It's the first time we have come across malware of this type," Henwood said.

The malware records the magnetic stripe information on the back of a card as well as the PIN. That data can be printed out on the ATM's receipt roll when a special master card is inserted to the ATM that launches a user interface. It can also be recorded on the magnetic stripe of that master control card.

"We were surprised at the level of sophistication," Henwood said. "It does make us generally pretty nervous."

Most ATMs run security software, but financial institutions haven't focused on their security as much as other systems, Henwood said.

"ATMs were kind of an afterthought and were considered to be fairly stable," Henwood said. "I'd say there's not been enough focus in the past on ATM infrastructure."

Those who wrote the malware have detailed knowledge about how ATMs work, Henwood said. The sample they tested ran on ATMs using Windows XP.

The sample did not have networking capabilities, but that may be a natural evolution. That's particularly dangerous since most ATM machines in developed countries are networked. The danger is that the malware could be engineered into a worm that, once on one ATM, spreads through all ATMs on a network, Henwood said.

To install the malware, a person would need access to inside of the ATM or a port in which software could be uploaded. That means insiders could be involved, or cybercriminals have picked a lock on an ATM in order to install the software, Henwood said.

SpiderLabs has received information that similar malware has been found on ATMs now outside of Eastern Europe, Henwood said. Since then, the lab has provided detailed information on the malware to financial institutions and law enforcement, he said.

In March, security vendor Sophos found it had captured three ATM malware samples customised to target machines made by Diebold, around the same time SpiderLabs saw its first sample.


More from Techworld

More relevant IT news


dank4ak said: Windows on ATMs has been is and will be a Lousy idea Microsoft has no clue about secure operating systems Triton was excellent non-microsoft but recently bought out and switching to Windows based Crazy

Send to a friend

Email this article to a friend or colleague:

PLEASE NOTE: Your name is used only to let the recipient know who sent the story, and in case of transmission error. Both your name and the recipient's name and address will not be used for any other purpose.

Techworld White Papers

Choose – and Choose Wisely – the Right MSP for Your SMB

End users need a technology partner that provides transparency, enables productivity, delivers...

Download Whitepaper

10 Effective Habits of Indispensable IT Departments

It’s no secret that responsibilities are growing while budgets continue to shrink. Download this...

Download Whitepaper

Gartner Magic Quadrant for Enterprise Information Archiving

Enterprise information archiving is contributing to organisational needs for e-discovery and...

Download Whitepaper

Advancing the state of virtualised backups

Dell Software’s vRanger is a veteran of the virtualisation specific backup market. It was the...

Download Whitepaper

Techworld UK - Technology - Business

Innovation, productivity, agility and profit

Watch this on demand webinar which explores IT innovation, managed print services and business agility.

Techworld Mobile Site

Access Techworld's content on the move

Get the latest news, product reviews and downloads on your mobile device with Techworld's mobile site.

Find out more...

From Wow to How : Making mobile and cloud work for you

On demand Biztech Briefing - Learn how to effectively deliver mobile work styles and cloud services together.

Watch now...

Site Map

* *