The Bedel Security Blog

Jackpotting ATMs: What Banks Should Know

Written by Chris Bedel | Feb 2, 2018

This week, the Secret Service began warning financial institutions about a rash of jackpotting attacks across the US, and the threat that more could be coming.

Brian Krebs ran the story back on Tuesday: https://krebsonsecurity.com/2018/01/drug-charges-tripped-up-suspects-in-first-known-atm-jackpotting-attacks-in-the-us/

According to the Krebs report, the US Secret Service recently sent out an alert warning that the “targeted stand-alone ATMs are routinely located in pharmacies, big-box retailers, and drive-thru ATMs.”

What you need to know:

  • Although this affects both rear and front loading ATMs, the front loading models are under a greater threat due to the ease of physical access to install malware
  • We are recommending that you contact your ATM manufacturer or support provider to determine if your ATMs are susceptible
  • In this case, strong physical controls (not allowing access to the internals of the ATM) is the key mitigating control
    • This includes verification of the identity of all ATM technicians that work on your ATMs - you may want to alert your branches as well