Goldilocks and the Three ATM Attacks
summary
Three ATM case studies show concrete failures: a hardened machine yields a stolen SAM and a custom management binary that accepts a two-packet 1,400-byte RCE via management binary (IDA Pro and Kali used to reverse and exploit); an unpatched machine is an EternalBlue-exploitable Windows host with ATM software running as administrator; a well‑hardened system still loses $7M after attackers remove drives, sideload malware and exploit a wafer lock bypassed in seconds, plus Java/Flash backend and PowerShell/meterpreter abuse.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:43About David
- 6:37ATM Bravo Analysis
- 7:40ATM Charlie Analysis
- 9:20ATM Alpha Analysis
- 11:20Flash App
- 15:00Wafer lock
- 18:48Electronic lock
- 20:44How to prevent
- 24:20Audience Questions
related talks
45mATMS how to break them to stop the fraud
01h 02mNation-State Moneymule's Hunting Season – APT Attacks Targeting Financial Institutions
55mNation-State Moneymule's Hunting Season – APT Attacks Targeting Financial Institutions
38mFail Harder: Finding Critical 0-Days in Spite of Ourselves
42mHack Your ATM with Friend's Raspberry.Py
27mProtecting Data In-Use from Firmware and Physical Attacks
26mTechnical Tracks
58mHow I used to rob banks!