15 December 2017
visit www.avoka.com

ATM jackpotting for dummies; Yours for just £3,788

18 October 2017  |  6485 views  |  0 atm

Kaspersky Lab has discovered an ATM jackpotting kit for sale on the Dark Web which provides step-by-step instructions for non-techies to crack open a cash machine.

Cutlet Maker consists of three components and enables ATM jackpotting if the attacker is able to gain physical access to the machine. A toolset potentially allowing criminals to steal millions is on sale for just £3,788 and comes equipped with an ATM-hacking for Dummies user guide.

Europe saw a surge in the number of ATM black box attacks - where devices are attached to machines and command cash outs - in the first half of 2017.

There were 114 such attacks across 11 countries over the six months, more than 300% up on the 28 seen in H1 2016, according to the European Association for Secure Transactions (East), which estimates related losses of EUR1.5 million.

In the case of Cutlet Maker, criminals need to gain direct access to an ATM’s insides in order to access the USB port, which is used to upload the malware. If successful, they plug in a USB device which stores the software toolkit. The toolkit relays information on the currency, value and number of notes in each cassette to maximise returns.

Says Kaspersky Lab: "Although malicious tools for hacking ATMs have been known for many years, the latest discovery shows that malware creators are investing more and more resources into making their 'products' available for criminals who are not very familiar with computer science."

Cutlet Maker has been on sale since 27 March 2017, however as researchers discovered, the earliest known sample came on the radars of the security community in June 2016. The guidelines that come with the malware kit contain videos which were presented by their authors as real life proof of the malware’s efficiency.

Konstantin Zykov, security researcher at Kaspersky Lab, says: "This may potentially become a dangerous threat to financial organisations. But what is more important is that while operating, Cutlet Maker interacts with the ATMs software and hardware, encountering almost no security obstacles at all. This should be changed in order to harden ATM machines."

Comments: (0)

Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

ATM black box attacks soar in Europe

ATM black box attacks soar in Europe

06 October 2017  |  7928 views  |  0 comments | 5 tweets | 8 linkedin
Twenty-seven arrested over ATM jackpotting attacks

Twenty-seven arrested over ATM jackpotting attacks

22 May 2017  |  6267 views  |  0 comments | 6 tweets | 6 linkedin
ATM jackpotting gang linked to attacks across Europe

ATM jackpotting gang linked to attacks across Europe

23 November 2016  |  6745 views  |  0 comments | 7 tweets | 11 linkedin
Thai police hunt suspects behind $350,000 ATM jackpotting heist

Thai police hunt suspects behind $350,000 ATM jackpotting heist

30 August 2016  |  4361 views  |  0 comments | 3 tweets | 6 linkedin
Cops break up ATM jackpotting gang

Cops break up ATM jackpotting gang

07 January 2016  |  7576 views  |  0 comments | 2 linkedin

Related blogs

Create a blog about this story (membership required)
visit www.solutions.lexisnexis.comvisit www.response.ncr.comvisit www.aciworldwide.com

Top topics

Most viewed Most shared
satelliteRipple completes XRP Lockup
10117 views comments | 3 tweets | 2 linkedin
PSD2: Laying the regulatory foundation for a new age in paymentsPSD2: Laying the regulatory foundation for...
9525 views comments | 17 tweets | 36 linkedin
Banks and fintech startups join forces on blockchain-based supply chain pilotBanks and fintech startups join forces on...
6922 views comments | 19 tweets | 20 linkedin
hands typing furiouslyReshaping Customer Engagement & Da...
6304 views 0 | 4 tweets | 2 linkedin
Nordea takes Open APIs into live productionNordea takes Open APIs into live productio...
5886 views comments | 5 tweets | 26 linkedin

Featured job

Competitive base, double ote, benefits
London, UK

Find your next job