Self-service device penetration attacks

[rakhirhif8963]

Banks are slightly more troubled by criminals using special means, in particular explosives. For example, an ATM can be filled with gas and blown up, which will attract the attention of the security service only at the very last moment. In recent years, up to 30 such cases have been recorded worldwide, and the annual damage amounts to 170 to 200 million euros.

Preventing such attacks is the prerogative of the security service. Reliable installation of self-service devices, effective use of video surveillance systems and delivery of notifications from sensors installed on the terminal - helps to minimize the risk that cash or the ATM as a whole will disappear without a trace along with the criminals.

A much greater danger is posed by attacks on the lithuania whatsapp data device using malware installed directly on the terminal itself. To do this, as a rule, a small hole is drilled to access the ATM computer, onto which special software is installed via a USB port, for example, the GreenDispenser Trojan or the software part of the CutletMaker kit, available to hackers of such devices around the world.

The manipulations themselves are not always noticeable to the bank's security staff, so the criminals manage to carry out the preparatory stage without much risk to themselves: the video camera is taped over, cutting a small hole in the terminal body takes only a few minutes, and the ATM computers themselves are usually protected by standard antivirus software or are not protected at all.

Logical attacks are the most effective way to steal money. Malware instructs the dispenser to dispense all the banknotes stored in the ATM cassettes before security can respond.

Specialized solutions that limit access to the device from external processes and other manipulations can protect devices from attacks using hacker software. Creating a "sandbox" and a kind of hardware-software copy of the ATM environment allows you to automatically detect any suspicious activity on the terminal and instantly inform the responsible personnel, simultaneously launching one of the security scenarios.