Diebold Nixdorf warns of a new class of ATM 'black box' (jackpotting) attacks across Europe

guest · Jul 16, 2020

Diebold Nixdorf warns of a new class of ATM 'black box' attacks across Europe
New ATM black box (jackpotting) attacks have been spotted in Belgium
July 16, 2020
https://www.zdnet.com/article/diebo...class-of-atm-black-box-attacks-across-europe/

ATM maker Diebold Nixdorf is warning banks of a new type of ATM "black box" attack that was recently spotted used across Europe.

ATM "black box" attacks are a type of jackpotting attack -- when cybercriminals make an ATM spit out cash. A jackpotting attack can be executed with malware installed on an ATM, or by using a "black box."
A black box attack is when an intruder unfastens an ATM outer case to access its ports or cuts a hole in the casing for direct access to its internal wiring or other hidden connectors.
Click to expand...

Black box attacks allow lower-skilled threat actors to quickly purchase the black box equipment and malware they need and start jackpotting ATMs within days.
NEW NOVEL ATTACK TARGETS PROCASH 2050XE ATMS
In a security alert sent on Wednesday, Diebold Nixdorf, the world's largest ATM maker, said its investigators have become aware of a new variation of black box attacks that is being used in certain countries across Europe.

While attackers usually deployed malware or their own code to interact with the ATM cash dispenser component, the ATM vendor said that during these recent attacks the perpetrators appear to have obtained a copy of the ATM software (firmware), which they've installed on the black box and were using to interact with the cash dispenser.

"The investigation into how these parts were obtained by the fraudster is ongoing," the company said. Currently, Diebold Nixdorf believes the attackers might have connected to an ATM and found its software stored insecurely on an unencrypted hard disc.
Click to expand...

guest · Nov 30, 2020

Crooks stole 800,000€ from ATMs in Italy with Black Box attack
November 29, 2020
https://securityaffairs.co/wordpress/111659/cyber-crime/black-box-attack-italy.html

A criminal organization has stolen money from at least 35 ATMs and Post Office cash dispensers operated by Italian banks with a new black box attack technique.

The Carabinieri of Monza dismantled by the gang, the Italian law enforcement agency confirmed that the cybercrime organization stole about 800,000€ in just 7 months using #ATM Black Box attack.
According to local media, the gang had numerous logistical bases in the provinces of Milan, Monza, Bologna, Modena, Rome, Viterbo, Mantua, Vicenza and Parma.

In this attack, a black box device, such as a mobile device or a Raspberry, is physically connected to the ATM and is used by the attackers to send commands to the machine.
Click to expand...

In July, Diebold Nixdorf, a leading manufacturer of ATM machines, issued an alert to customers warning all banks of a new variant of ATM black box or jackpotting attacks. The alert was issued after the Agenta Bank in Belgium was forced to shut down 143 ATMs after a jackpotting attack.
This was the first time that Belgian authorities observe this criminal practice in the country.

According to the security alert issued by Diebold Nixdorf, and obtained by ZDNet, the new variation of black box attacks has been used in certain countries across Europe.
Click to expand...

Log in or Sign up

Diebold Nixdorf warns of a new class of ATM 'black box' (jackpotting) attacks across Europe

guest Guest

guest Guest

Log in or Sign up

Diebold Nixdorf warns of a new class of ATM 'black box' (jackpotting) attacks across Europe

guest Guest

guest Guest

Useful Searches