Security is a top priority at Case Financial, which is why we want to inform our clients that we’ve recently become aware of ATM jackpotting activity in your area. These attacks involve thieves using advanced methods such as DMA and hard-drive attacks, along with other specialized tools to breach the ATM and install malicious malware that forces the machine to dispense large amounts of cash. Hyosung, Diebold, NCR, and other Windows-based ATMs remain particularly vulnerable. Additionally, front-access units, including 24-hour lobby ATMs and stand-alone drive-up islands, are at higher risk than traditional through-the-wall installations.
We are committed to your security and recommend the following steps to mitigate the risk from this type of attack:
Utilize remote monitoring software
With RemoteView, you can monitor, manage and maintain your ATM fleet from a remote dashboard. This enables zero-day protection and response to malicious attacks, Hard Drive Encryption, patch updates and much more. If your financial institution is a RemoteView client, Case Financial has already automatically pushed updates remotely to protect against the latest type of logical attacks.
Increase surveillance on your ATMs
Installing an enhanced security system at your ATM allows you to view, monitor and respond to potential threats. Make sure to alarm your top hat, so access to your ATM is being monitored. We recommend installing a camera with loitering alerts in your drive-through, vestibule or wherever your ATM is placed.
ATM Security Gates (where applicable)
Installing a security gate in front of your stand-alone ATM adds a layer of protection to help prevent logical and brute-force (hook and chain) attacks.
Transport Layer Security Protocol (TLS 1.2)
NCR specifically recommends, per PCI-DSS guidance, communications between the ATM and the acquirer Host MUST be encrypted using TLS 1.2 as a minimum. This will be a project between your network and Case Financial.
Update your BIOS
Learn more about ATM DMA attacks here https://casefi.com/case-financial-resolution-to-atm-dma-attacks/
If your financial would like more information on protection against these attacks, please call Case Financial at 877.728.9627.
ADDITIONAL RESOURCES:
ATM SECURITY WEBINAR (Hosted by Case Financial) https://youtu.be/XKSBZJFEK98