ISR News: Diebold ATM’s Under Attack
Excerpts From SearchFinancialSecurity.com
North Canton, Ohio-based Diebold alerted customers about the break-ins and the security update in January. The attacks, which were isolated to Russia, involved physical access to ATMs and were not a network-level security compromise, the company said in its notice. The suspects in the case have been apprehended, according to Diebold.
Diebold spokeswoman DeAnn Zackeroff said the physical attacks on the machines were very low-tech but that the malware installation indicated that the attackers were highly sophisticated. She said a number of machines in Russia were attacked, but that Diebold moved quickly to alert its customers and issue the software update.
In its alert, Diebold noted the risk to the ATMs was “significantly increased” if the Windows administrative password has been compromised, the hardened version of Windows provided by Diebold isn’t used, or if the Sygate/Symantec firewall provided with Diebold Agilis software has been disabled or isn’t configured properly. The company advised its customers of security best practices, including changing the default Windows password on its Windows-based ATMs, and making periodic changes to the administrative password.
“Obviously, fraudsters have tried to connect devices to ATMs before,” he said. “Normally they attach them on the outside of the machine, so there’s something for the public to see, but if they install malware onto the machine, there’s nothing for the human eye to see.”
Filed under: Breach, Class Action Lawsuit, D&O Liability, Financial, Government, ISR News, PCI, Sarbanes-Oxley, Uncategorized, hackers, identity-theft, malware, national security, privacy
Comments
Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!
