How To Sign New York Banking PDF

Display us phone log

criminals are interested in return on investment and the return on investment for an attack like this is much higher because you can target multiple ATMs without leaving your house this is a home based command center think of it as the ID technician for this crime this is just a standard ATM so I'm gonna going to withdraw $40 from this ATM select English fun pin I'm gonna make sure to protect my pin I'm gonna do withdraw checking for 40 we have 2x force red $20 bills I'm gonna request $40 again let's see how much money I can get out I'll take a receipt now this time in fact if you look at my receipt it also says $40 [Music] from a criminal point of view one of the great things about this attack is that the bank has no idea what's happened the bank told to the ATM in a dispensed two bills it has no idea that the attacker modified the response and changed it to ten bills you see everything from XP embedded XP Windows 7 all the way up to more modern variants of Windows so you're saying that the most vulnerable versions of Windows are deployed on thousands of ATM machines yes you have a lot of ATMs across the country that still run Windows XP so the type of vulnerabilities that we exploit initially on an ATM are very common ATMs are architected a very similar way to a home PC in fact often times it may be more vulnerable because of the difficulty in patching ATMs that are distributed across the wide geographic area most of the ATMs don't have a support staff that's standing there and if the bank has to send someone out to each ATM to install software it significantly increases costs so they're usually very conservative about which patches and which software they push out this is the receipt printer has the standard USB connection shows up in Windows just like any other printer you could actually print Word documents on this the same is true for the save the cash dispenser is also just a USB device we've printed out our own money and stocked it up once the ATM is compromised that's where it gets a lot more complicated an attacker has to know how to communicate with the specialized devices each vendor has a separate set of hardware that they're going to be using every piece of software on an ATM has the potential to be a little bit different so we create our own custom software when we're performing attacks the attacker could monitor everything that's going on for example the attacker can see what's actually displayed on the screen of the ATM and also observe the network traffic the highlighted text here is the magnetic stripe data from the card you see the 4000 is corresponds to the $40 that Charles requested a lot of people assume that when an ATM...