Where I work, we have a lot of XP computers, they all have anti-virus installed because they are susceptible to malware. In fact they are so susceptible that it’s almost a full time job keeping them all free of viruses. So, if you want to make ATMs, what would be the last OS that you would use to do so? It seems that ATMs in Eastern Europe are being targeted by malware that runs on, you guessed it, Windows XP!
This highly proficient software can only be installed directly onto the machine, so some insider dealing is needed. Once installed though, the software can read the magnetic strip on the card and also the PIN number typed in.
After the malware has been running and picking up details, the attacker can pop in a controller card that allows a few options, details can be printed out on the ATMs printer, log files reset, the software uninstalled, and of course my favorite, have the machine dispense all it’s cash. There is also a lower level card that can only perform a specific job.
This is the sixteenth version of the tool since 2007, and shows that there is a definite development cycle. It is unclear if the malware has made it any further towards Central Europe. I have no doubt that schemes of this nature would be of huge interest to the UKs crims, and even to people who have no criminal inclinations whatsoever.
This report by SpiderLabs is similar in its subject matter to a report by Sophos that warned of a similar piece of software, although the latter only effected one of the manufacturers machines. The temptation here is to say that the manufacturers should use a secure operating system, but I can only guess that they have their reasons for choosing Windows. Perhaps the skills for developing the software are more cost efficient if they use the Microsoft platform. And XP can be hardened.
Lets just hope that we don’t see it in Blighty. It’s just not cricket is it? And if it does come over here, lets hope I find a controller card. I always wanted to be that guy in Superman, stuffing his trousers with money from the faulty ATM.
Image: http://hackedgadgets.com/