Physical attacks on ATMs

Physical attacks remain the most common type of attack on ATMs in most countries of the world: break-in, sawing ATM or its safe, theft of the terminal itself, etc. Even if unsuccessful, the criminals do considerable damage to expensive banking equipment, making it impossible to operate it further for days or weeks.

Implementation of a video surveillance platform allows you to receive data on all suspicious activities carried out in the vicinity of the ATM, using video cameras, a set of special sensors (gas, temperature, motion sensors), and anti-skimming devices which prevent the installation of skimming devices on ATMs.

Logical attacks on ATMs (jackpotting, etc.)

To perform a logical attack, intruders install special malicious software on ATM machines that initiates a cash withdrawal scenario from the terminal. This software can be installed remotely or via an external data storage device that is directly connected to the self-service device after some physical manipulation.

To protect self-service devices from logical attacks, special software solutions are used to encrypt the data stored and transmitted by ATM computers, and to stop unauthorized software and processes running on the terminals.

Personal data theft (skimming, shimming, trapping)

To steal personal data attackers use special devices that are installed on the ATM card reader, keyboard, or ATM dispenser: skimmers, shimmers, card, and cash traps, etc.
Skimmers read card data from the magnetic strip during a transaction; shimmers read data recorded on the chip. Stolen card information is used to create a duplicate card.

Another type of ATM fraud is trapping. Attackers seize the card by pre-installing a special trap loop on the card slot(card-trapping) or steal cash by installing a trap on the cash dispenser (cash-trapping).

Manufacturers of self-service devices equip terminals with special devices that prevent theft of personal data from user cards (anti skim solutions and others), as well as actively develop and implement wireless data transfer technologies. Additional security measures during authentication are also provided by specialized software solutions, including comprehensive video surveillance systems.