Jackpotting Crime Wave Hits Mass ATMs

15 Aug 2018 · 2 min

Watch on YouTube

2:08

The 7 News segment, reported by Steve Tellier, exposes a surge of "jackpotting" attacks where criminals hack ATMs to dispense cash at rates exceeding $2,000 per minute, emptying machines in under ten minutes. Recent incidents have hit ATMs in Ludlow, Attleboro, Danvers, and Boston’s Back Bay, with a total of at least 124 nationwide attacks since May 2017, resulting in over $3.5 million stolen. The report features security analyst Robert Siciliano (Hotspot Shield) demonstrating how attackers, often posing as repair technicians, use universal keys to open ATMs and install malware that gives them full control of the cash dispenser. The Secret Service notes many suspects are Venezuelan and suggests a coordinated international criminal network, with more than a dozen arrests across the U.S. Siciliano urges ATM operators to strengthen hardware and software security to prevent the threat from spreading further.

Chapters

Criminals hacking ATMs so they spit out cash rapid-fire at a speed of more than $2,000 a minute. A nationwide crime wave that's now hitting banks in Massachusetts. It's called jackpotting, and investigators in the US have never seen anything like it. The scam itself could take under 10 minutes to completely liquidate all the cash in the ATM. ATMs in Ludlow, Attleboro, Danvers, and Back Bay. A 7 News investigation has found all have recently been targeted by by criminal jackpotters. Robert Siciliano, security analyst with Hotspot Shield, showed 7 News how it works. The suspects often dress as repairmen so they don't attract attention. They pry open or simply unlock the ATM. These keys are pretty much universal. Then infect its hard drive with malware. Now they can manipulate the machine any way they want. After a few clicks of a keyboard, the ATM is emptying itself of every bill inside, as shown in this demonstration by a security researcher a few years ago. Criminal jackpot Jackpotting attacks were virtually unheard of in the U.S. until last May. Now, the Secret Service says there have been at least 124 attacks since then nationwide, including the 4 attacks 7 News uncovered that took place right here in Massachusetts. More than a dozen jackpotting suspects have been arrested coast to coast since January. Court documents show in Washington State, investigators say one suspect got away with more than $267,000 in just 4 days. They'll hit an area and then move on to another area. The Secret Service says says some of the attacks are likely being coordinated by a larger international criminal network. 7 News found most of the suspects are citizens of Venezuela.
Because it is such a well-coordinated attack that we feel like we need to devote the necessary resources to put a stop to it immediately.
Siciliano says ATM operators need to do more to make their hardware and software more secure. Otherwise, you'll see this spread like wildfire throughout the country. The Secret Service says criminals have jackpotted more than $3.5 million nationwide so far and counting. Steve Tellier, 7 News.