DEFCON 18: Jackpotting Automated Teller Machines Redux 2/3

Speaker: Barnaby Jack


The presentation "Jackpotting Automated Teller Machines" was originally on the schedule at Black Hat USA 2009. Due to circumstances beyond my control, the talk was pulled at the last minute. The upside to this is that there has been an additional year to research ATM attacks, and I'm armed with a whole new bag of tricks.

I've always liked the scene in Terminator 2 where John Connor walks up to an ATM, interfaces his Atari to the card reader and retrieves cash from the machine. I think I've got that kid beat.

The most prevalent attacks on Automated Teller Machines typically involve the use of card skimmers, or the physical theft of the machines themselves. Rarely do we see any targeted attacks on the underlying software.

Last year, there was one ATM; this year, I'm doubling down and bringing two new model ATMs from two major vendors. I will demonstrate both local and remote attacks, and I will reveal a multi-platform ATM rootkit. Finally, I will discuss protection mechanisms that ATM manufacturers can implement to safeguard against these attacks.

For presentations, whitepapers or audio version of the Defcon 18 presentations visit: http://defcon.org/html/links/dc-archives/dc-18-archive.html

Category:

Science & Technology

Tags:

• 10
• defcon
• 073
• clip2

[win1337]

The fuck was the cameraman up to?

[WrittenByMyDog]

great camera work durr

[xXx1a00a1xXx]

hurrr nice camera work /sarcasm

[GigsVT]

I isn't the cameraman's fault. At defcon the camera was on a stage thing in the middle of the room and people sitting behind it would put their feet on it and kick it and things like that.

[playerjosh146play8]

U god

[kaziyakun]

any one who wonders why the diebold keys are unavailable was a scandal due to diebold made the USA voting machines with once again the one key fits all and these tamper proof machines thus became, vulnerable.

so it was covered up and taken off line.

[illtrykill]

Awsome camera... ASS =\

[Lrrrrrrrr]

good cameraman... good

[lordofsraam]

Does anyone know where to get Dillinger and Scrooge? I've been googling for a while now.

[dspyrit1]

check out the blackhat presentation also on youtube - more professional talk with much better cameramen

[ssanders6]

For those of you freaking out about "OMG, how can he teach people how to do this??"

This guy is actually helping. Maybe not the ATM companies themselves (who are likely already aware of such *potential* vulnerabilities) but definitely the customers who buy these ATMs and are made to believe that threats like this don't exist.

Tutorials like this force companies to invest into security rather than relying on only unknown amounts of criminals knowing.

[Joeey]

What's with the 5k whistle in the sound system?