Malware Late ATM Debit Card On Command Swallow

Malware for ATMs exists already for years, but now researchers have discovered a variant that is able to command the ATM debit cards to make swallowing, so that criminals can then retrieve. Reported that the US security firm FireEye.

The malware is "Suceful" and is probably the end of August developed. The name comes from a type of mistake made by the authors, says analyst Daniel Regalado. According to Regalado, the malware may still be in the development stage, but it features "shocking" features not previously seen in ATM malware.

So the malware can all the information from the magnetic strip reading, reading data from the chip of the card, the debit card on command ingestion and the sensors off in the ATMs, so as to avoid detection. To communicate with the ATM malware uses a number of application programming interfaces (APIs) called XFS, which stands for "extensions for financial services". By using these APIs, the equipment in the vending machine to communicate with each other. The Ploutus-malware for ATMs made use of XFS.

The advantage of XFS is that it works independently of the supplier. Suceful can also infect ATMs from multiple vendors.How the infection is precisely carried out is unknown. In the past, it turned out that criminals often had physical access to the ATM and the malware installed via CD-ROM or USB stick.

Cybercriminals Steal 60 Million Of Russian Banks

Cyber ​​criminals have stolen 60 million last year from Russian banks and their customers, as announced, the Russian Central Bank. This involves both attacks on online banking users as attacks against the banks themselves. So last year was several times for attackers gained access to ATMs and so could control the issuance of banknotes.

An analyst of the Russian anti-virus firm Kaspersky Lab opposes SC Magazine that these attacks are mainly possible because the ATMs are still running on Windows XP. In addition to these direct attacks on banks virus fighter saw the number of Trojan horses that was designed to defraud online banking increase by a factor of nine.

According to a spokesman of the Russian Central Bank passed the number of attacks on bank accounts last year 300,000 operations, allowing the Russian banking system would be the most vulnerable in Europe. Due to the increased activity of cyber criminals looking Russian banks also new guidelines to tighten security.

US Bank Introduces Pins Via Smartphone

A US bank has 750 ATMs adapted so customers money using their smartphone instead of a debit card can record. To pin must BMO Harris Bank customers install an app on your smartphone. The app can record it indicated amount.

Then the smartphone to scan a QR code on the screen of the selected ATM, after which the money is spent. The QR code would expire after 45 seconds. "When you walk away from an ATM with a QR code on the screen, there's no risk. The QR code contains no personal information about you or your accounts. It only identifies the ATM you use for the transaction," the explanation of the bank.

The entire process of pins would take fifteen seconds mobile, while a normal transaction with a debit card would take 45 seconds. The bank notes that the map data of the customer are not stored on the smartphone or app. In case customers lose their smartphone, they should be immediately reported this to the bank, so that mobile banking can be disabled.

"Smartphones are increasingly becoming the only device that people use to manage their lives," says Connie Stefankiewicz of BMO Harris Bank. "Consumers have growing expectations when it comes to digital tools and services they offer. When it comes to personal finances, we know that our customers want their financial needs through their smartphone." The bank is planning to prepare in June another 150 ATMs for mobile pins.