FBI warns of Imminent Worldwide ATM Attack

Like gamblers, cybercriminals love hitting the jackpot. The FBI is warning in a “not-so-confidential” alert to financial organizations about an imminent scheme to steal large amounts of cash from ATMs all around the world. The expectation is that this will occur very soon. It is a scheme called jackpotting, where the cybercriminals hack a financial institution or payment card processor, then used cloned cards they steal from them at ATMs.

Initially reported by Brian Krebs of Krebs on Security, the criminals use phishing to infiltrate a financial institution, then use information stolen from them to create fake cards. They then change the security controls that may be in place so that the ATMs will dispense unlimited amounts. Unfortunately more specific details regarding this potential attack are not currently available and it is unknown what if any specific financial institutions are already breached. That said, everyone will need to remain on high alert until further details emerge.

In the meantime, the most important thing you can do is lookout for phishing scams. Regardless of the security tools that may be in place at home or at work, phishing emails make their way into inboxes more often than anyone would like. While it is getting more difficult to detect phishing these days, there are still some tried and true guidelines. If they are not well-written, have generic greetings, and just don’t look professional, they are most likely phishing. However, the number one rule to follow these days is never open an attachment or click a link that you are not expecting to receive. This holds true no matter who the sender may be.

Since this attack is likely to originate as a result of a hack into an organization that is not yet known, everyone should keep tabs on their bank balances for at least the next few weeks. If there is any change, up or down that is not a result of your own activity, immediately contact your financial institution to let them know.

Hitting the jackpot is no longer limited to Vegas or Monaco. Cybercriminals are figuring out how to do it stealthily. And while casinos have lots of security and cameras everywhere, those things just don’t exist in the cyberworld.

Stickley on Security
August 15, 2018