With more and more tools and modules being sold on the dark web lately, even a novice hacker could hack an ATM machine within 15 minutes.
CloudSEK the past someone had to have the necessary knowledge to use such a tool, nowadays dark web vendors are promoting newer tools such as malicious cards and USB for ATMs to hack such machines, making the job simple for anyone.
“While it used to be a little more difficult, with the new techniques anyone can manage these machines,” says security researcher Rakesh Krishnan of CloudSEK, who posed as a buyer to connect with dark web sellers and learn the latest news about ATM hacking.
One of the vendors provided him with an ATM Malware Card that includes a PIN Descriptor, Set off Card, and instructions on the correct way to withdraw money from the machine.
Another widespread technique for stealing money from ATMs is to infect them through the use of a USB drive that hosts malware.
These malware programs primarily target programs that run on Windows XP Home. Furthermore, Krishnan explains that the majority of these modules work on ATM machines worldwide and most of the time do not require modifications for different regions. “ATM machines all over the world use specific methods and software, so these malware programs work everywhere,” he emphasizes.
Gautam Kumawat, a cyber, says that many of these cheap tools available on the dark web are easily accessible on global e-commerce websites with instant ordering capabilities.
Additionally, there are some other add-ons to these tools that don't need to be in direct contact with the machines. For example, a recently discovered technique uses the Ploutus-D malware, which takes over the hardware units, allowing anyone to remove all the money from a machine.
Krishnan also states that many of the dark web vendors provide the latest hacking available in the market, such as POS Terminals, Upgraded Antenna, Custom ATM Skimmers, RFID Reader/Writer and the like. The prices of these techniques range around $1400. Card cloning is another key hacking technique in cyberspace.
Cybersecurity experts point out that, in addition, ATM machines are not updated, which makes them even more vulnerable.
