ATMs are targeted by fraudsters because they hold large amounts of cash, and they continue to be targets. For this reason, it is very important to secure ATMs and close their security vulnerabilities.
Diebold Nixdorf Inc and NCR Corp, two of the world's largest ATM manufacturers, reported that cybercriminals, using hacking schemes known as “jackpotting,” have targeted ATMs in the United States after Asia, Europe and Mexico.
Although the ATM manufacturers' statements about the latest hacking case did not disclose details of the hacked machine, they are important for gauging the scale of hacking attacks that are rising worldwide.
It was also stated that in earlier heists the thieves arrived at the ATM disguised as technicians and took a mirror image of the machines by installing malware on their operating systems. Diebold, one of the manufacturers, said that the thieves had replaced the hard drive.
Security researcher Brian Krebs stated that American ATMs were hacked with Ploutus.D, a variant of the “jackpot” system released in 2013, and that the situation is a major concern for the entire ATM industry.
NCR, one of the manufacturers, stated that these attacks serve as a warning for ATM manufacturers to take action. It was also reported that the hackers targeted ATM models known as Opteva.
It was also noted that preventing attacks on ATMs is not difficult. Many ATMs still run Windows XP, and moving to Windows 7 and 10 would be a major precaution, since Windows XP machines are easy targets.
In addition, both security organizations and ATM manufacturers said that security measures should be taken to prevent physical access to the machines.
What precautions can be taken for ATM security?
- The best and most effective method available is to post a notice at a suitable place where the ATM is located stating that the ATM is equipped with hidden cameras and records video from every angle.
- First of all, the XFS standard needs to be renewed with an emphasis on security, and two-factor authentication should be applied between the device and the legitimate software. This will reduce the ability of attackers who withdraw cash without authorization using trojans to gain direct control over ATM units.
- To prevent fraud, speed up investigations, audit transactions and improve service, it is important to integrate camera recordings with the ATM central software. This way, various incidents can be caught instantly and automatically by this integration, allowing quick action to be taken.
- Password protection and integrity checks should be applied to the data transmitted between all hardware units and the computers inside the ATMs.
