Hacking ATM Machine - 3 (With Malware-USB)

As we know, Microsoft have stopped supporting the Windows XP operating system after 8th April, 2014, apparently 95% of the world’s 3 million ATM machines are running on it. Microsoft's decision to withdraw support for Windows XP poses critical security threat to the economic infrastructure worldwide.
Now, hackers can exploit a weakness in Windows XP based ATMs, that allow them to withdraw cash simply by sending an SMS to compromised ATMs.

"What was interesting about this variant of Ploutus was that it allowed cybercriminals to simply send an SMS to the compromised ATM, then walk up and collect the dispensed cash. It may seem incredible, but this technique is being used in a number of places across the world at this time." researchers of Symantec said.

In this hack you will need a malware named Backdoor.Ploutus. 

To install the malware into ATMs machines, you must connect the ATM to a mobile phone via USB tethering and then to initiate a shared Internet connection, which then can be used to send specific SMS commands to the phone attached or hardwired inside the ATM.If you need this malware, I sale it for $1500. To buy this, contact me from "contact form" in sidebar.

HOW-TO HACK ATMs:

(Need 2 Mobile phones, USB cable)

• Connect a mobile phone to the machine with a USB cable and install Ploutus Malware.
• The attacker sends two SMS messages to the mobile phone inside the ATM.
• SMS 1 contains a valid activation ID to activate the malware
• SMS 2 contains a valid dispense command to get the money out
• Mobile attached inside the ATM detects valid incoming SMS messages and forwards them to the ATM as a TCP or UDP packet.
• Network packet monitor (NPM) module coded in the malware receives the TCP/UDP packet and if it contains a valid command, it will execute Ploutus
• Amount for Cash withdrawal is pre-configured inside the malware
• Finally, the hacker can collect cash from the hacked ATM machine.

 Now-a-days there are few more advanced variants of this malware, some attempts to steal customer card and PIN data, while others attempt man-in-the-middle attacks.

If you need this malware, I sale it for $1500. To buy this, contact me from "contact form" in sidebar.

Read more ...

Hacking ATM Machine - 2 (Free Cash)

WARNING: ATM hacking is illegal in all countries & is nothing but hi-tech bank robbing. If you choose to engage in such activities, you deserve the full force of the law.
The purpose of exposing this hacking technique is not to encourage thieves but to persuade banks to improve security. Ironically, this hack takes advantage of a security feature that is designed to protect our cash in case we are being mugged at the ATM, or we just forget.

THE HACK
Precautions
Precaution 1: Most ATM’s are covered by CCTV. The thief will therefore have his face covered.
Precaution 2: The thief will have to wait about 20 seconds (which can seem like an eternity when in a rush) and the ATM may make some noise thereafter. The best time to attempt this hack is therefore at night, when there is nobody around. Remember, most ATM’s are accessible 24 hours a day.
Precaution 3: Obviously the thief will need to know the pin number. This hack is not about hacking the pin. The thief can use their own credit card, at least once.
Precaution 4: The thief must ascertain whether the bank operates a ‘cash retraction/retention policy’ for their ATM machines. Most banks do have such a policy.



The Technique
Step 1: The thief uses an available credit/debit card (preferably with a large withdrawal limit) and selects the option to withdraw a specific amount of cash. The greater the number of notes the thief withdraws, the easier step 2 becomes. The card is returned and the cash is released into the cash dispenser.
Step 2: This is the critical point. Calm and have steady hands are important: The thief holds firm of the top or bottom few notes of the cash pile (with a slight push into the dispenser) with one hand and with the other hand, slide- pulls the remaining (larger pile) of cash from the dispenser.
Step 3: If the thief has successfully managed to keep a few notes in the cash dispenser, he has to about wait 20 seconds. Warning: The ATM machine may make a few noises. But after the elapsed time, the ATM will take the remaining cash back into the ATM.
Having assumed someone is attempting to mug the thief, the ATM takes the cash back and cancels the entire transaction. ATM’s can count the cash out but can’t count the cash back into the machine.
If the thief chose to withdraw $500 and retain $50 within the ATM, the bank will cancel the entire $500 transaction. And the thief will have pocketed $450 of ‘free cash’.
THE SOLUTIONS
There are a couple things banks can do to improve their security. If machines can count cash out, they should be able to count incoming cash from the same cash dispenser. Or banks can disable the automatic cash retraction policy and have the account holder come in to the bank to make a claim.
Some banks (such as RBI in India) have cancelled their cash retraction policy, altogether.
But banks in the UK appear to be moving in the opposite direction. In the past, banks such as HSBC, Royal Bank of Scotland (RBS) and Tesco Bank held on to retracted money in reserve until the account holder made a claim.
Barclays Bank plc and Lloyds TSB Group have an automatic cast re-crediting policy, as do Santander but only if the account holder is a Santander customer.
It is time for banks to improve their ATM technology so the cash can be counted back into the machine.

Read more ...

Hacking ATM Machine - 1

HOW THE ATM MACHINE WORKS


If you have been to the bank, you find out that the money in the ATM MACHINE is being filled right inside the house where the machine is built with enough security.

To hack this machine manually, get an ATM card, wether valid or not, as long as it can freely enter into the machine. Then get a candle, light the candle and use the wax to cover the panel on the ATM CARD, covering that panel will make the card look defualt to the machine.


Now, go to any Bank near you and try this trick, but if you are caught, thats your own wella ooh! not mine. When you get to the machine, insert the card and enter a default pin which is 0000. Done that? Wait and see the action. The atm machine will dispense cash. But some times the machine would say card not smart or it would just eject your card. The reasons is because some atm machines are upgraded while others are not.

HOW DO I KNOW AN UPGRADED MACHINE
For you to know an upgraded atm machine, you will observe that most times when you use a particular atm machine, as the machine is dispensing the cash, the bank will also send you a debit alert. If the machine is not upgraded, it may take up to 30 minutes before the bank sends a debit alert. The candle trick is 60% efficient on a machine that is not upgrade but it may not work on upgraded machine because of its sensitivity.

Read more ...