Security is a top priority at Case Financial, which is why we wanted to inform our clients that we have recently become aware of ATM Jackpotting attacks in your area. Thieves use a variety of tools to break into the ATM, loading them with malicious malware causing them to automatically dispense large amounts of cash. Hyosung, Diebold, NCR, and any Windows-based ATMs are susceptible to this attack. In addition, front-access (Lobby ATMs with 24-hour access) and drive-up (Stand-alone Island) configurations are at higher risk than a typical through the wall installation.
We are committed to your security and recommend the following steps to mitigate the risk from this type of attack:
Utilize remote monitoring software
With RemoteView, you can monitor, manage and maintain your ATM fleet from a remote dashboard. This enables zero-day protection and response to malicious attacks, Hard Drive Encryption, patch updates and much more. If your financial institution is a RemoteView client, Case Financial has already automatically pushed updates remotely to protect against the latest type of logical attacks.
Increase surveillance on your ATMs
Installing an enhanced security system at your ATM allows you to view, monitor and respond to potential threats. Make sure to alarm your top hat, so access to your ATM is being monitored. We recommend installing a camera with loitering alerts in your drive-through, vestibule or wherever your ATM is placed.
ATM Security Gates (where applicable)
Installing a security gate in front of your stand-alone ATM adds a layer of protection to help prevent logical and brute-force (hook and chain) attacks.
Transport Layer Security Protocol (TLS 1.2)
NCR specifically recommends, per PCI-DSS guidance, communications between the ATM and the acquirer Host MUST be encrypted using TLS 1.2 as a minimum. This will be a project between your network and Case Financial.
If your financial would like more information on protection against these attacks, please call Case Financial at 877.728.9627.
ADDITIONAL RESOURCES
ATM DMA ATTACKS https://casefi.com/case-financial-resolution-to-atm-dma-attacks/
ATM SECURITY WEBINAR (Hosted by Case Financial) https://youtu.be/XKSBZJFEK98