Hackers Target ATM Maker for Bitcoins

guest · Aug 22, 2022

Hackers Stole Crypto from Bitcoin ATMs by Exploiting Zero-Day Vulnerability
August 22, 2022

A Bitcoin ATM company has had its systems compromised by a zero-day exploit which enabled hackers to siphon off an undisclosed amount of the digital currency.

General Bytes noted in a “highest” severity alert on Friday that a zero-day bug in its critical Crypto Application Server (CAS) was to blame for the attack.

“The attacker was able to create an admin user remotely via CAS administrative interface via a URL call on the page that is used for the default installation on the server and creating the first administration user,” the alert revealed.
“This vulnerability has been present in CAS software since version 20201208.”
Click to expand...

The Prague-based firm, which claims to be the world’s large maker of cryptocurrency ATMs, said that after creating a new default admin user, the hackers were then able to modify the crypto settings of two-way machines.

The CAS server has now been patched with two updates and all clients are urged not to continue operating their ATMs until they have completed a series of remediation steps.
Click to expand...

More concerning is the fact that the bug in question was not identified by the firm in “multiple security audits since 2020.”
Click to expand...

Log in or Sign up

Hackers Target ATM Maker for Bitcoins

guest Guest

Log in or Sign up

Hackers Target ATM Maker for Bitcoins

guest Guest

Useful Searches