funsec mailing list archives

Re: Operating System in US ATMs


From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Thu, 5 Jun 2008 10:37:47 +0300 (EEST)

There are several screenshot pictures about Windows ATMs freezing to BSOD.
Let's google them...

Juha-Matti

Vitaly McLain <vitaly.mclain () gmail com> kirjoitti: 
There's really a plethora of operating systems to be found on ATMs.
Many older ones are just CICS screens or similar. OS/2 was also very
popular, but as mentioned, Windows XP is taking over. In internal
penetration tests, it's not uncommon to compromise a Diebold ATM
because they often lack patches for common vulnerabilities, such as
NetAPI. That's scary, but then again there are a lot of hurdles to
clear before you can make this access useful. You have to be on the
internal network first, then you have to find a way to read inputted
information (I believe pin-pads are encrypted at some point?), etc.
Certainly possible, but it's not low hanging fruit -- especially when
stand-alone ATMs like Triton and Tranax can often be easily
cleaned-out with a pre-paid debit card, the right button combo on the
keypad and a default password.

vitaly

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: