Jackpotting The ATM

Europe – Recently, according to the news, Europe has been attacked and victimized by an ATM-crashing activity that empty the ATM of cold cash or money in it. The crime or activity is term as “Jackpotting”. It is “…the industry term for the attacks that thieves use to quickly empty ATMs.” (Wired)

“In general, jackpotting refers to a category of attacks aiming to dispense cash from an ATM illegitimately.” (Wired)

The attackers, according to the news, uses a device or devices that prompt the ATM to dispense or put out large sum of money which result to emptying the ATM of cash or money. The device is attached to the ATM which prompt the machine to put out cash or money. In previous attacks, they call the attached device as “black box”. Thus, some attacks is called “black box attack”. They call the attack also as “hardware-based attack” because of attacking the hardware component of the ATM.

“In some cases, the attached devices connect directly to the cash dispenser and issue commands for it to spit out cash. The other form of black-box attack plugs into network cables and records cardholder information as it’s relayed back and forth between the ATM and the transaction center that processes the session. The attached device then changes authorized maximum withdrawal amounts or masquerades as the host system to allow the ATM to dispense large sum of money.” (Wired)

“The new variation uses a device that runs parts of the company’s proprietary software stack. Attackers then connect the device to the ATM internals and issue commands. Successful attacks can result in a stream of cash, sometimes dispensed as fast as 40 bills every 23 seconds. The devices are attached either by gaining access to a key that unlocks the ATM chassis or by drilling holes or otherwise breaking the physical locks to gain access to the machine internals.” (Wired0

ATM (image from CNN Philippines website)