Card skimmers have taken a backseat in recent years as cybercrime stories focus on ransomware, the darkweb, and supply-chain attacks. Ransomware attacks allow criminals to extract payoffs online, using technologies like the darkweb and cryptocoins. Supply-chain attacks target third parties that regularly handle precious data, allowing criminals to bypass their victims’ networks. In contrast, card…
Military puns have a long history in the world of operating systems. Unix is home to Major Number, a team of personnel that organise the devices such as disk drives, keyboards and webcams in your system. Microsoft once famously ran into General Failure, who had trouble reading DOS disks. Linux has intermittently had difficulty with…
Cryptocurrency ATM manufacturer General Bytes recently disclosed a security incident that resulted in the theft of millions of dollars’ worth of funds. The attackers exploited a vulnerability in the master service interface that Bitcoin ATMs use to upload videos, allowing them to execute a JavaScript script with batm user privileges. This code execution gave the…
Cybersecurity company Metabase Q has documented a new malware family targeting ATMs in Latin America. Dubbed FiXS and containing Russian metadata, the threat is currently targeting banks in Mexico, but has been found to be vendor-agnostic and able to work on any ATM that supports CEN XFS. The malware is deployed embedded in a dropper…
