FBI warns of imminent mass attack on world’s ATMs

[Hydrogen]

America's intelligence chiefs have warned banks of a major hacking threat to cash machines worldwide in the next few days.

The FBI sent out a confidential alert on Friday to warn that cyber criminals are planning a global 'cash-out scheme' using malware to take over ATMs and steal millions of dollars.  

Banks were warned that they could fall victim to an 'unlimited operation' in which millions of dollars could be withdrawn from cash machines.  

Smaller banks with less sophisticated security systems are thought to be most vulnerable to an attack using the 'jackpotting' technique, the Daily Telegraph reports.  

The warning said: 'The FBI has obtained unspecified reporting indicating cyber criminals are planning to conduct a global Automated Teller Machine (ATM) cash-out scheme in the coming days, likely associated with an unknown card issuer breach.'

The website Krebs On Security reported that criminals could create 'fraudulent copies' of bank cards by installing their data on reusable magnetic strip cards.

The FBI warned that 'at a pre-determined time, the co-conspirators withdraw account funds from ATMs using these cards.'

'Historic compromises have included small-to-medium size financial institutions, likely due to less robust implementation of cyber security controls, budgets, or third-party vendor vulnerabilities,' the alert said.

Attacks could affect banks all over the world with British banks with large overseas interests including Barclays and HSBC thought to have been made aware of the danger from the 'jackpotting' technique.

Earlier this year it was revealed that a co-ordinated group of hackers had stolen more than $1million by hijacking cash machines in the U.S.

The spate of attacks represented the first widespread jackpotting activity in the United States, officials said in January.

The heists, which involved hacking ATMs to rapidly shoot out torrents of cash, were across the United States spanning from the Gulf Coast to New England.

An alert at the time from an ATM maker said the method included gaining physical access, replacing the hard drive and using an industrial endoscope to depress an internal button required to reset the device.

A U.S. Secret Service alert sent to banks in January said machines running Windows XP were more vulnerable and encouraged ATM operators to update to Windows 7 to protect against the attack.    

Hackers have moved from stealing payment card numbers and online banking credentials to more lucrative hacks on bank networks, giving them access not only to ATM machines, but also to electronic payment networks.

In 2016 it was reported that cyber criminals had remotely attacked cash machines in more than a dozen countries across Europe.  

http://www.dailymail.co.uk/news/article-6056189/FBI-warns-cyber-criminals-plotting-mass-hack-against-bank-ATMs.html

....

Odd news story.

In theory, the FBI focuses mainly on north america with the CIA, NSA and other organizations focusing more on the global side of things. That could make it a bit strange for the FBI to come forward with this story given that other intelligence organizations around the world could arguably have more access to funding and resources.

Lack of details might hint at this threat being largely unconfirmed.

This is a strange warning altogether. I wonder if people will withdraw funds from bank accounts in an attempt to defend against this.

[davis196]

I guess that FBI is the global police.
Most of the hackers and criminals that hack/steal money from credit cards/ATMs are not from the USA.
That's why FBI has partneships with lots of european and asian police departments.
I don't think that this news will create a mass bank/financial panic.Most of the people know that their small bank deposits (under 100,000 euro or USD)are guaranteed by the government.

[First77]

Cashless society means less ATM machines.

[Sama517]

This is somewhat a very huge scary news. But how possible is this? Does it means the hackers will break into the banks databases all over the world? I am not too sure if this will be possible.

[dothebeats]

Isn't this already happening globally though go quite unnoticed given that no such 'threats' were discovered? I don't find it strange that the FBI releases such intel since it might help banks and financial institutions to combat the said threat before it goes live (if it indeed was a legitimate threat.) Prevention is better than cure anyways, so better be safe than sorry. Also, it's about time that most banks upgrade their fairly outdated systems since even at this day and age, I've seen a lot of vulnerabilities in the banks' that I visited in the past couple of years. Perhaps changing the way how the ATM cards work etc. and many other implementations, or perhaps an overhaul of the system in order to prevent card spoofing and the likes.

[unusualfacts30]

I have heard similar news in the past but things go by and nothing happens except in some cases. Only people who would panic are those who have millions in the bank, average family has less than $5k in savings and they're worry free for the most part.

[paynercash]

The warning is unclear as well. The fact that most bank users are guaranteed by the government. Of course, state owned banks, and private banks, are not sure. Security should be more protected, the damage is still depositors.

[BorisVirla]

Not the best news from them.

[samcrypto]

I have heard similar news in the past but things go by and nothing happens except in some cases. Only people who would panic are those who have millions in the bank, average family has less than $5k in savings and they're worry free for the most part.

Ordinary people are also affected because that is the only we have. So this news is really alarming though I know in some places your bank account are still safe. The security of this technology is the main concerns and I think this is one of the reason why big people are coming in now in the cryptoworld.

[brukva]

Very interesting, maybe they specifically spread this news?

[Kakmakr]

Well, just the other day, someone posted a article that reveals Malware that were for sale to target Bitcoin ATMs. So, these guys are not just targeting Fiat ATMs. If government sanctioned attacks are launched at Bitcoin ATMs and people's private keys are hijacked or coins re-directed, then this will have a huge impact on people's ownership of coins.

They may lie dormant, until they gathered enough information and then shift massive amounts of coins from "active" wallets in one sweep. <They do not have to send people to ATMs to physically gather the cash, like some hackers did before.>  

[FreeEarnsActivist]

Wonder if BTC ATMs would be vulnerable to similiar attacks.

[atliens99]

I dont trust the media, this is most likely a fake story to push whatever agenda they want next.

[tdtduy]

I have read this article and have reason to suspect this issue. First, although this is the secret information of the FBI to banks around the world, but has appeared in the news. Second, attacking ATM plants is a crime that has been, is, and always is. The task of the bank is to protect all assets involved. Third, is there an individual or a group of people, who wants many others to withdraw their property out of the bank in bulk? Security is the responsibility of the bank.

[davinchi]

America's intelligence chiefs have warned banks of a major hacking threat to cash machines worldwide in the next few days.

The FBI sent out a confidential alert on Friday to warn that cyber criminals are planning a global 'cash-out scheme' using malware to take over ATMs and steal millions of dollars.  

Banks were warned that they could fall victim to an 'unlimited operation' in which millions of dollars could be withdrawn from cash machines.  

Smaller banks with less sophisticated security systems are thought to be most vulnerable to an attack using the 'jackpotting' technique, the Daily Telegraph reports.  

The warning said: 'The FBI has obtained unspecified reporting indicating cyber criminals are planning to conduct a global Automated Teller Machine (ATM) cash-out scheme in the coming days, likely associated with an unknown card issuer breach.'

The website Krebs On Security reported that criminals could create 'fraudulent copies' of bank cards by installing their data on reusable magnetic strip cards.

The FBI warned that 'at a pre-determined time, the co-conspirators withdraw account funds from ATMs using these cards.'

'Historic compromises have included small-to-medium size financial institutions, likely due to less robust implementation of cyber security controls, budgets, or third-party vendor vulnerabilities,' the alert said.

Attacks could affect banks all over the world with British banks with large overseas interests including Barclays and HSBC thought to have been made aware of the danger from the 'jackpotting' technique.

Earlier this year it was revealed that a co-ordinated group of hackers had stolen more than $1million by hijacking cash machines in the U.S.

The spate of attacks represented the first widespread jackpotting activity in the United States, officials said in January.

The heists, which involved hacking ATMs to rapidly shoot out torrents of cash, were across the United States spanning from the Gulf Coast to New England.

An alert at the time from an ATM maker said the method included gaining physical access, replacing the hard drive and using an industrial endoscope to depress an internal button required to reset the device.

A U.S. Secret Service alert sent to banks in January said machines running Windows XP were more vulnerable and encouraged ATM operators to update to Windows 7 to protect against the attack.    

Hackers have moved from stealing payment card numbers and online banking credentials to more lucrative hacks on bank networks, giving them access not only to ATM machines, but also to electronic payment networks.

In 2016 it was reported that cyber criminals had remotely attacked cash machines in more than a dozen countries across Europe.  

http://www.dailymail.co.uk/news/article-6056189/FBI-warns-cyber-criminals-plotting-mass-hack-against-bank-ATMs.html

....

Odd news story.

In theory, the FBI focuses mainly on north america with the CIA, NSA and other organizations focusing more on the global side of things. That could make it a bit strange for the FBI to come forward with this story given that other intelligence organizations around the world could arguably have more access to funding and resources.

Lack of details might hint at this threat being largely unconfirmed.

This is a strange warning altogether. I wonder if people will withdraw funds from bank accounts in an attempt to defend against this.

It’s not going to affect every country. But sometimes I really think that the government are very stupid, don’t you think they are the ones who are sponsoring these criminals sometimes ? Okay since they know that,  why didn’t they do anything in a way to prevent it from happening? Rather they are giving warnings, that’s high level of stupidity.

And by the way,  they should also know where those money goes into and should return it back once it happens. This is one of the reason I say we shouldn’t trust the government, bunch of criminals.

[thomas_goal]

Well, just the other day, someone posted a article that reveals Malware that were for sale to target Bitcoin ATMs. So, these guys are not just targeting Fiat ATMs. If government sanctioned attacks are launched at Bitcoin ATMs and people's private keys are hijacked or coins re-directed, then this will have a huge impact on people's ownership of coins.

They may lie dormant, until they gathered enough information and then shift massive amounts of coins from "active" wallets in one sweep. <They do not have to send people to ATMs to physically gather the cash, like some hackers did before.>  

Once the malware is established, it's not hard to divert transfers to other wallets or make the coins "disappear". Maybe they are just collecting information as much as possible like you said to wait until the ideal striking moment. I'm not sure if I would trust ATMs anyway.

In reality they can intercept payments but not get into wallets from these codes, especially if you keep your wallet cold. Safe practices can avoid exposure to risks like this. There's too many bandits in this wild west trading environment.

[cizatext]

This is the more reason why the world should adopt blockchain technology as the digital bank because with blockchain it means less ATM and less of all this cyber crime, no dought that the blockchain also have it own challenges but at list in a lesser level. The FBI as the global police have done a good job but it left for the banks to upgrade to a more secured operating system on their ATM machines.

[oriontab]

Another point to the fact that the current security firewalls against cybercrimes are inadequate.Blockchain offer a better solution-only if Governments will find enough research to further develop the blockchain technology, we will better equipped against such attack

[mensahkkofie]

The message behind the warning is unclear to some extent. In any case, it is the  duty of all stakeholders especially bank owners to ensure that their security systems are very tight to prevent the occurrence of such attacks that affects the trust of depositors.

[Osayo]

This kind of threat need to be taken very seriously, but it might not be that easy for the attackers to perpetrate. This is because all the banks' ATM globally do not operate on one server or network.