Go homepage(回首页)
Upload pictures (上传图片)
Write articles (发文字帖)

The author:(作者)delv
published in(发表于) 2014/1/2 7:52:05
High-tech thieves with USB stick install malicious code for ATM，

High-tech thieves use USB stick install malicious code for ATM-u disk, ATM-IT information Hi-Tech thieves using a USB memory stick with the ATM install malicious code

Researchers in Germany Hamburg, chaotic computers meeting, details how to use USB ports to ATM to install malicious code.

In July this year, how much European ATM machines in the absence of cases of plundering that triggered the alert. Researchers unveiled the high-tech thieves after analysis method: ATM machines cut a hole first, insert the USB in the machine's built-in USB port, mended the hole after you install, so the same machine can not be found repeatedly in the context of the theft. Thieves need to enter a 12-digit code starting with an interface that displays extracted balances and the supply of each denomination, a series of menus on the screen to release the banknotes of various denominations.

Researchers say, which allows the thief preferred extraction of high denomination banknotes to reduce exposure time. In order to prevent a thief stolen, malicious software developers have designed a similar two-step validation mechanism.

高科技小偷用U盘为ATM安装恶意代码 - U盘,ATM - IT资讯
高科技小偷用U盘为ATM安装恶意代码

研究人员在德国汉堡举行的混沌计算机会议上，详细介绍了如何利用USB端口为ATM安装恶意代码。

今年7月，欧洲发生了多台ATM机器在没有触发警报的情况下遭到掠夺的情况。研究人员在分析之后揭开了高科技小偷的方法：首先给ATM机器切开一个洞，在机器内置的USB端口上插入U盘，安装之后补上洞口，因此同一台机器可以在不被发现的情况下多次窃取。小偷需要输入12位代码启动一个界面，显示可提取余额和每种面额纸币的供应量，屏幕上展示了一系列菜单去释放各种面额的纸币。

研究人员说，这允许小偷优先提取高面额的纸币减少暴露时间。为了防止某位小偷私吞，恶意软件开发者设计了一套类似二步验证的机制。

赞