Network Security Blogs

Internet and Computer Security Advisories and Updates

[Video] 95% ATMs Machine in Malaysia Open to Vulnerable ?

This is how Malaysian ATMs Machines were hacked through Short Messaging System ( SMS )

Hacked ATMs using SMS



Previously happening in Malaysia is  the high-tech Latin American gang hacked and stole Ringgit Malaysia 3 million  in a couple of nights?

Its all started with Microsoft  as they have stopped supporting Windows XP operating system after 8th April, 2014. In other words, even if the ATM trojan horse was discovered one day after the end-of-support date, Microsoft will not release any security patches to plug the threat, period.



The problem is there are up to 95% ATM machines still running on Windows XP. Again, due to cost and profit, banking institutions prefer to close one-eye and pretend as if their ATMs were as secured as the Alcatraz.

 In the case of Malaysian ATM thefts, the Latin Americans could most likely infected their compact disc with “Backdoor.Padpin” trojan horse. Once the CD is inserted, the ATM reboots and execute the trojan horse, which create the following file:

[PATH TO THREAT]\ulssm.exe

The Trojan then creates the following registry entries so that it runs every time Windows starts:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\”ulssm.exe” = “[PATH TO THREAT]\ulssm.exe“

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\”ulssm.exe” = “[PATH TO THREAT]\ulssm.exe“




The Trojan can delete itself if it fails to gain control of the PIN pad or dispenser. It runs in the background until a specific code is entered on the ATM’s PIN pad. Finally, it then opens a back door on the ATM running Windows XP, allowing an attacker to perform the following actions:
Display cassette information such as bills left, denomination and total amount per cassette
Dispense money from the compromised ATM
Select which cassette the ATM dispenses money from
Temporarily disable the local network to avoid triggering alarms when withdrawing money
Extend the duration of the session in order to continue stealing money
Delete the Trojan from the compromised ATM

There’s also another famous trojan horse – Backdoor.Ploutus – which was discovered in 2013 to hack ATMs in Mexico.

Amazingly, this Ploutus trojan allows cybercriminals to simply send an SMS to the compromised ATM, then walk up and collect the dispensed cash. Here’s how it works:




Process overview

1. The attacker installs Ploutus on the ATM and connects a mobile phone to the machine with a USB cable.
2. The controller sends two SMS messages to the mobile phone inside the ATM.
2.1 SMS 1 must contain a valid activation ID in order to enable Ploutus in the ATM.
2.2 SMS 2 must contain a valid dispense command to get the money out.
2.3 The phone detects valid incoming SMS messages and forwards them to the ATM as a TCP or UDP packet.
2.4 In the ATM, the network packet monitor module receives the TCP/UDP packet and if it contains a valid command, it will execute Ploutus.

2.5 Ploutus causes the ATM machine spew out the cash. The amount of cash dispensed is pre-configured inside the malware.

The cash is collected from the ATM by the money mule.

3. The Attacker Collect the Cash


Whichever the method used, the Latin American gang did one huge mistake – they forgot to erase their foot trail by deleting their trojan from the ATMs hacked and robbed. Perhaps they were too excited and surprised with the lack of banking security in this country. Either way, the fact that no security guard was deployed to this “goldmines” can only means one thing – the hacking spree is going to continue (*tongue-in-cheek*).



So What can be done to protect ATMs Machine in Malaysia?

Modern ATMs have enhanced security features, such as encrypted hard-drives, which can prevent these types of installation techniques. However, for older ATMs still running on Windows XP, protecting against these types of attacks is more challenging, especially when the ATMs are already deployed in all sorts of remote locations. Another difficulty that needs to be addressed is the physical security of the computer inside the ATMs. While the ATM’s money is locked inside a safe, the computer generally is not. Without adequate physical security for these older ATMs, the attacker has the upper hand.

A number of measures could be taken to make things more difficult for the criminals. These include:

Upgrading to a supported operating system such as Windows 7 or 8
Providing adequate physical protection and considering CCTV monitoring for the ATM
Locking down the BIOS to prevent booting from unauthorized media, such as CD ROMs or USB sticks
Using full disk encryption to help prevent disk tampering
Using a system lock down solution such as Symantec Data Center Security: Server Advanced (previously known as Critical System Protection)
With all these measures in place, attackers would find it much harder to compromise an ATM without a complicit insider.


[ Video ]

Last but not Least Please watched this this useful video provide by symantec on how to hack the ATM Machines.


 


92 Komentar untuk "[Video] 95% ATMs Machine in Malaysia Open to Vulnerable ?"
This comment has been removed by a blog administrator. - Hapus

Great job buddy! Thanks for sharing such a wonderful & of course very important information with us. We will be alert further. ATM Machines

HACK ATM AND BECOME RICH TODAY!!!!

Hello everyone. There is a new way of making cash, although it is illegal but also a smart and easy way of living big. I used to be a barrack girl until i became eager and decided to change my life one way or the other. I got opportunity to register for the militant amnesty through connection thereby taking me out of the country for training in the United States for a period of 3years. To cut the story short, during my training i made some white friends who were geeks and also experts at ATM repairs, programming and execution who taught me various tips and tricks about breaking into an ATM. with my knowledge gained from my white geek friends, i have been able to counterfeit and programme a blank ATM card using various tools and software's. I have ready-made programmed ATM cards; I am just 29, my family are in USA and i have cash, i have a car, i live in malaysia and i travel all around the world. i do my things on a low-key to avoid suspicion. Some of you will wonder why i am selling this out if truly i am already living large. It is because it is hard task doing it yourself, i wont lie to you, its not easy to hack ATM talk more of to reprogramme the card alone and be able to get 40,000 Kuwaiti dinar each day. It takes days and sometimes weeks. Some of you will want the ready made card to avoid the stress of doing it yourself and i don't give the ready made card out for free because i spent days trying to make it available for you. e-mail me. jerrymegan@yahoo.comfor request of the ATM NOTE: the ATM card has no pin, no registered account number. It has no limit for withdrawal and it is untraceable. jerrymegan@yahoo.com


EXPERT TECH of the email address.

(mrjohnhacker@gmail.com) its at it

again! Cool way to have financial

freedom! Are you tired of living a poor

life, mrjohnhacker@gmail.com here is

the opportunity you have been waiting

for. Get the new ATM BLANK CARD that

can hack any ATM MACHINE and withdraw

money from any account. You do not

require anybody's account number before

you can use it. Although you and I

knows that its illegal, there is no

risk using it. It has SPECIAL FEATURES,

that makes the machine unable to detect

this very card, and its transaction is

can't be traced. You can use it

anywhere in the world. With this card,

you can withdraw nothing less than

$10,000 in a day. So to get the card,

reach the hackers via email address

:mrjohnhacker@gmail.com. add or text

this number on +2348054265852

This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus

I got my already programmed and blanked ATM card to
withdraw the maximum of $25,000 MONTHLY for a maximum of 12 MONTHS. I am so happy about this because i got mine last week
and I have used it to get $150,000 already. Georg Bednorz Hackers is giving
out the card just to help the poor and needy though it is illegal but it
is something nice and he is not like other scam pretending
to have the blank ATM cards. And no one gets caught when
using the card. get yours from Georg Bednorz Hackers today! Just send an email
to georgbednorzhackers@gmail.com

This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by the author. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by the author. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by the author. - Hapus
This comment has been removed by the author. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus

I've been reluctant in purchasing this blank ATM card i heard about on-line because everything seems too good to be true, but i was convinced & shocked when my friend at my place of work got the card from DAVID BENJAMIN COMPANY & we both confirmed it really works, without delay i gave it a go. I have been able to make a cash withdrawal of $5000 daily from the card and am glad i gave it a try at last & this card has really changed my life financially and no more hanging bills. If you need this card from genuine hackers then do not hesitate to contact davidbenjaminltd@outlook.com

This comment has been removed by a blog administrator. - Hapus

Hello Guys,This is a Life Time transformation !!!I have being hearing about this blank ATM card for a while and i never really paid any interest to it because of my doubts. Until now i discovered this hacker called Elizabeth . She is really good at what she is doing and she is Godsent, Back to the point, I inquired about The Blank ATM Card from her If it works or even Exist She told me Yes and that its a card programmed for random money withdraws without being noticed and can also be used for free online purchases of any kind. This was shocking and i still had my doubts. Then i gave it a try and asked for the card and agreed to her terms and conditions. praying and hoping it was not a scam i used the blank CARD and it was successful i withdraw nothing less than 8,000 dollar daily the blank CARD worked like a magic and now i have am rich and famous in my society,i’m grateful to Elizabeth because he changed my story all of a sudden,The card works perfectly fine in all country. Elizabeth’s email address is elizabethcole232@yahoo.com

This comment has been removed by a blog administrator. - Hapus

Hello Guys,This is a Life Time transformation !!!I have being hearing about this blank ATM card for a while and i never really paid any interest to it because of my doubts. Until now i discovered this hacker called Elizabeth . She is really good at what she is doing and she is Godsent, Back to the point, I inquired about The Blank ATM Card from her If it works or even Exist She told me Yes and that its a card programmed for random money withdraws without being noticed and can also be used for free online purchases of any kind. This was shocking and i still had my doubts. Then i gave it a try and asked for the card and agreed to her terms and conditions. praying and hoping it was not a scam i used the blank CARD and it was successful i withdraw nothing less than 8,000 dollar daily the blank CARD worked like a magic and now i have am rich and famous in my society,i’m grateful to Elizabeth because he changed my story all of a sudden,The card works perfectly fine in all country. Elizabeth’s email address is elizabethcole232@yahoo.com

This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus
This comment has been removed by a blog administrator. - Hapus

I was diagnose with human papilloma virus (HPV) 4 years ago and i met a doctor he told me there is no cure and i have be taking some medication the warts multiplied when trying to removed them and it got me embarrass and pains, luckily few weeks ago i was recommend to Dr Onokun for natural treatment after one week i got 100% cure and all the wart and pains got disappeared, i sheared this post because its part of my life experience, encase anyone need speedy help about this cure email Dr Onokun via, dronokunherbalcure@gmail.com

You need access to keep an eye on your spouse by gaining access to their emails?, want to know what your kids do on social networks? Whatever it is, Ranging from changing grades, whatsapp hack, email hack. We can get the job done. change of grades?We are team and have great feedback. We are 100% legit. You don’t have to pay anything before we begin your job His contacts; SUPERIOR.HACK@GMAIL.COM Cell or mobile number-(+1 669 225 2253)

Dear sir/madam;

I'm Bradley Blake from IRELAND, working as Financial Consultant in UK.. Am in direct contact with an active and capable Provider of Bank Instruments(SBLC/FC BG & LC) we've close successful deals together since working over the years. Our SBLC/BG can be engaged in PPP Trading, Signature Projects, Petroleum, Oil & Gas, Business Funding, Aviation and MORE.. If interested, you can contact me through.

inquiry contact

Name: BRADLEY BLAKE

E-mail: bradleyblakesfinancialfundsplc@gmail.com

Skype ID: bradley blake

for more details and our working procedure.

Am direct the provider, Brokers are welcome with their clients.

We Bring To You Good News From Hennager Blank ATM Cards And Bitcoin Investments..

Have you been trying to get a real blank ATM Card or bitcoin and it has been a problem trying to get one? Here is Hennager Blank ATM Card easy and affordable to get and it can be delivered to you waiting 24hrs after you have made your order from me at: hennager4040@gmail.com

We have special cash loaded programmed ATM card and bitcoin for you to meet up with those needs of yours and also start up your own business. Our ATM card can be used to withdraw cash at any ATM or swipe, stores and POS. Our cards has daily withdrawal limit depending on the card balance you order.You can make from $2500 to $50,000.00 In USD And EUR,with our Programmed card. Contact us today for your own order at : hennager4040@gmail.com

Here are the price list for ATM Cards:
Balance Price

$2500---------------$155
$5000---------------$255
$10,000-------------$500
$13,000-------------$680
$15,000-------------$760
$17,000-------------$880
$20,000-------------$970
$25,000-------------$1000
$30,000-------------$1100
$35,000-------------$1200
$40,000-------------$1300
$45,000-------------$1350
$50,000-------------$1500

Western Union/Money Gram Transfer
Walmart Transfer
Removing of name from debit record and criminal
Account top-up
Bitcoin Investments
We can also help you hack into any software you wish or want us to hack into too.

Do contact for more info and also on how you are going to get your order..
Order yours today via Email: Gmail-Compose mail to: hennager4040@gmail.com
Hangouts: hennager4040@gmail.com
TEXT: +1470 203 2639

Hennager Peter.

INSTEAD OF GETTING A LOAN, CHECK OUT THE BLANK ATM CARD IN LESS THAN 24hours {oscarwhitehackersworld@gmail.com}

Am GORGE JUDY,I want to testify about OSCAR WHITE blank ATM cards which can withdraw money from any ATM machines around the world. I was very poor before and have no hope then I saw so many testimony about how OSCAR WHITE send them the blank ATM card and i use it to collect money in any ATM machine and become rich. I also email him and he sent me the blank card. I have use it to get $100,000 dollars. withdraw the maximum of $5,000 daily.OSCAR WHITE is giving out the card just to help the poor. Hack and take money directly from any ATM Machine Vault with the use of ATM Programmed Card which runs in automatic mode. email Him on how to get it now via: oscarwhitehackersworld@gmail.com or whats-app +1(323)-362-2310

Hello everyone,my name is JANE,i want to share with you how i got a blank atm card that

changed my life. I saw a post of a man who got atm card from a guy called Nico,i decided to

contact him,he told me how the card works,i gave him a try,i received the card 4 days

later,i went to the atm and to my greatest surprise,i was able to withdraw $2,500 that

day,i was so happy because life has been so misearable for me Until now,am still using the

card and i have been able to withdraw $65,000. Thanks to "Nico blank card".i now have a

business of my own a car and a house of my own,my family is happy and living well. Am

sharing this here because of those who might be in need of it.He is the best guy that sell

blank atm card, you guys need to give him a try belive me he is real and he is a genius,you

can contact him at... HACKERNICO232@GMAIL.COM for yours.

You guys have surpassed my expectations! James is seriously amazing and is doing everything to help my Fiancé and me, in1weeks my credit score went up 700 points and I can only imagine what is to come. Thank you for the excellent customer service and doing exactly what you all have set out to do! NO GIMMICKS OR BS with you guys.They carry out any kind of hacks You can reachout to them via Hackintechnology@gmail.com

I got my already programmed and blanked ATM card to withdraw the maximum of $1,000 daily for a maximum of 20 days. I am so happy about this because i got mine last week and I have used it to get $20,000. Mike Fisher Hackers is giving out the card just to help the poor and needy though it is illegal but it is something nice and he is not like other scam pretending to have the blank ATM cards. And no one gets caught when using the card. get yours from Mike Fisher Hackers today! *email cyberhackingcompany@gmail.com

 
Copyright © 2014 Network Security Blogs - All Rights Reserved
Template By shahdinar