TweakTown
Tech content trusted by users in North America and around the world
6,077 Reviews & Articles | 39,025 News Posts
TRENDING NOW: GTA V will offer first-person mode on foot, and in vehicles on PC

Flaw in XP lets malware steal PIN Numbers

20 ATMs compromised so far

| Posted: Jun 5, 2009 2:57 pm

There is a hack that has been put into place on ATM(Automated Teller Machines)using windows XP as an OS that allows for malicious persons to recover account and PIN numbers directly from the machine.

 

The hack is most likely inserted using a compromised card that when read by the ATM causes the infection to begin. Once the virus is in play it replaces the isadmin.exe file which then replaces the lass.exe file.

 

Once the infection has run its course another "control" card can be used to harvest the information gathered. According to the report the card can even eject the cash box on the ATM.

 

Read more here.

 

Flaw in XP lets malware steal PIN Numbers

 


The malware was able to capture the magnetic stripe data from the private memory space of transaction-processing applications that were installed on these compromised ATMs, along with PIN codes for good measure.

 

Courtesy of some advanced management functionality found within the malware code, the attackers are able to control the compromised cash machines via a customised interface which can be accessed by simply inserting a controller card into the ATM card slot.

 

The stolen data can then be printed using the receipt printer built into the ATM, or output via the card reader to a suitable storage device. SpiderLabs do not believe that there is any networking functionality built into the malware, however.

 

Related Tags

Further Reading: Read and find more news at our news index page.

Do you get our news RSS feed? Get It!

Got an opinion on this news? Post a comment below!

Latest Tech News Posts

View More News Posts

Forum Activity

View More Forum Posts

Press Releases

View More Press Releases