funsec mailing list archives

Windows-based cash machines 'easily hacked'


From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Mon, 17 Mar 2008 14:04:40 +0200 (EET)

Who can read your credit card and debit card number in clear text:

"ATMs, or automated teller machines, today face the Internet-born threat of worms and denial-of-service attacks, as 
well as being at risk from malicious applications that can harvest customer data or hijack machines.

Up to 90 percent of the ATMs in the U.K. could be at risk from these attacks as they rely on desktop PC 
technology--usually Intel hardware and Windows operating systems--linked to other machines, some connected to the 
Internet, in the bank's network, according to experts.

Security vendor Network Box illustrated this threat by showing that only the personal identification number was 
encrypted when information was sent from a U.S. ATM to networked bank computers.

The card numbers, card expiration dates, transaction amounts, and account balances were clearly readable in plain text 
to anybody intercepting the data as it traveled through the network."
--clip--

More at
http://www.news.com/Windows-based-cash-machines-easily-hacked/2100-7349_3-6233030.html

Juha-Matti
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: