Turns Out Diebold's ATMs Insecure As Well; Scammers Install Malware

from the what-a-surprise dept

Diebold is pretty well known for being in two separate, though similar, businesses: ATMs and e-voting machines. Its e-voting machines have always had a terrible reputation, with security flaws and bugs galore (the company recently has tried to hide from all the negative publicity by renaming the e-voting division as Premier Election Solutions). However, many people kept asking how the company could get so many things so wrong when it came to e-voting, but still get its ATMs working properly. Of course, as has been noted in the past, the way ATMs work is quite different, and mistakes are likely to be spotted quickly.

However, it's now coming out that Diebold's ATMs also have security problems. Slashdot alerts us to the news that Diebold has issued a patch after discovering that some scammers have been able to install "card sniffing" software on a variety of Diebold ATMs allowing the scammers to get all your card details. Is that Premier Banking Solutions I hear knocking?

9 Comments | Leave a Comment..

Scams

by Mike Masnick

Tue, Mar 10th 2009 7:20pm

ATM Hackers Caught Following Car Chase And Gun Shots

from the just-like-the-movies dept

A few years back, there were some stories about how some scammers had found online manuals for popular ATMs, which included a default password, which was rarely changed (yes, that's an amazingly stupid design). This meant that it was fairly easy to program the ATM to believe that it held different denomination bills. For example, you could program it to think that it held $5 bills when it actually held $20s -- and then if you took out "$40" you would be given 8 bills -- or $160. Not surprisingly, other hackers have replicated this scam a bunch of times -- aided in large part by ATM owners who still haven't changed the default password.

Still, if you were a scammer pulling such a scam, you might think that it would make sense not to pull it at the same store multiple times. But, that's exactly what two guys did last year, where they tried to hit a local restaurant's ATM for the fourth time. By that point, the manager had been alerted to look out for them, and called the police on them when they came in again. There was a bit of a mess after that, as the manager tried to pull a gun on the scammers, and there was some sort of scuffle, a gunshot, and then a car chase... but eventually the guys were arrested. So, once again: ATM makers: stop offering machines with default passwords. ATM owners: change the default password on your machines. Scammers: don't be so dumb as to try to rip off the same place multiple times (or, maybe that's what we want, since it makes them easier to catch... but it's still dumb).

12 Comments | Leave a Comment..

Scams

by Carlo Longino

Mon, Jul 16th 2007 2:42am

If You Own An ATM, You Probably Want To Change The Default Password

from the 123456-really-isn't-very-secure dept

Nearly two years ago, we posted a story about how easy it was to find the user manuals for certain automatic teller machines online, and then use the default passwords listed in them to reprogram the machines so they'd give out $20 bills when they thought they were giving out $5s or $1s. The fix for this was easy -- change the default passcode -- but apparently it wasn't hard to find machines whose owners' hadn't changed them. Somehow, it really isn't too surprising to find out that, despite the publicity, some ATM owners still haven't bothered to change them, and are getting hit by the same scam. The owner of the machine in question this time, at a market in Pennsylvania, says that he was never told he needed to change the master passcode from "123456", and says it's not his job to know the technical ins and outs of the ATM he owns (despite, of course, owning it and the money inside); the ATM's manufacturer disagrees. As is the case with most things, there's probably enough blame to go around here. So, to the ATM company: it might be a good idea to reinforce the need for owners to change their machines' passwords. And ATM owners: change the default passwords.

76 Comments | Leave a Comment..

Search Techdirt

And now, a word from our Sponsors..

15% off discount for Techdirt Readers

Popular Posts

Poll

Add Techdirt RSS To Your Reader

Subscribe to Techdirt's Daily Email Newsletter

Older Stuff

Monday
2:10am:	School Can't Handle Critical Community Message Board; Sends Legal Nastygram (21)
Friday
7:39pm:	Liberian Laws Are A Secret Due To Copyright; Even The Gov't Doesn't Have Them (43)
6:56pm:	Lily Allen: It's Ok To Sell My Counterfeit CDs, Just Don't Give My Music For Free (97)
6:10pm:	EFF Looks To Bust Bogus Podcasting Patent; Needs Prior Art (34)
5:28pm:	Google Blocking Set Top Boxes From Showing YouTube Unless They Pay Up? (62)
4:44pm:	Entertainment Industry: Yes, Please Keep Negotiating Secret Copyright Treaty To Save Our Asses (43)
4:02pm:	If Google's Book Scanning Violates Copyright Law, What About The AP's Book Scanning? (21)
3:05pm:	iPhone App Developer Backlash Growing (49)
2:14pm:	Norwegian Band Told It Can't Post Its Own Music To The Pirate Bay, Even Though It Wants To (24)
1:08pm:	If You Only Share A Tiny Bit Of A File Via BitTorrent, Is It Still Copyright Infringement? (79)
12:00pm:	UK Digital Economy Bill As Bad As Expected; Digital Britain Minister Flat Out Lies About ISP Support (25)
10:57am:	NPR's Daniel Schorr Blames The Internet For Ft. Hood Shootings (37)
9:49am:	No, ACTA Secrecy Is Not 'Normal' -- Nor Is It A 'Distraction' (28)
8:33am:	Murdoch's The Times Accused Of Blatant Copying, Just As It Tells The World You Should Pay For News (27)
7:15am:	Copyright Extension Moves To Japan (24)
5:46am:	Canadian Ebook Store Offers 'Free' Public Domain Ebooks -- Claims Copyright Says You Can Only Make 1 Copy (26)
4:01am:	There Are Lots Of Ways To Fund Journalism (14)
1:49am:	Winner Takes All, Long Tails And The Fractilization Of Culture (10)
Thursday
10:37pm:	The Lobbyists' Ability To Control The Message (29)
8:11pm:	In Going Free, London Evening Standard Doubles Circulation While Slashing Costs (27)
6:10pm:	Senate Exploring Med School Profs Putting Names On Ghostwritten Journal Articles In Favor Of Drugs (22)
4:52pm:	What Does It Say When A Comedy Show Does More Fact Checking Than News Programs? (56)
3:33pm:	Nordic Music Week: Optimism Galore And Found Songs (11)
2:10pm:	Would Top Sites Really Opt-Out Of Google Based On A Microsoft Bribe? (37)
12:57pm:	Intel Lawyers Again Go Too Far In Trademark Bullying (24)
11:43am:	Mandelson Wants Gov't To Have Sweeping Powers To Protect Copyright Holders (40)
10:47am:	Once Again, Walmart Stops People From Printing Family Photos Due To Copyright Law Claims (42)
9:39am:	Essayist Writes Popular Essay... Then Sends 'Non-Negotiable' Invoice To Church Who Posts It Online (61)
8:23am:	ASCAP, BMI And SESAC Continue To Screw Over Most Songwriters: 'Write A Hit Song If You Want Money' (78)
7:07am:	Kicking People Off The Internet Not Enough In South Korea, Copyright Lobbyists Demand More (26)

Quick Links

Current Insight Community Cases

Turns Out Diebold's ATMs Insecure As Well; Scammers Install Malware

from the what-a-surprise dept

ATM Hackers Caught Following Car Chase And Gun Shots

from the just-like-the-movies dept

If You Own An ATM, You Probably Want To Change The Default Password

from the 123456-really-isn't-very-secure dept

Which Internet Concern Worries You The Most?

Techdirt's Daily Email Newsletter

Monday

Friday

Thursday

More