Hackers Program Bank ATMs to Spew CashAfter crimes in Taiwan and Thailand, the FBI warns of similar potential attacks in U.S.

http://www.wsj.com/articles/hackers-program-bank-atms-to-spew-cash-1479683814

Cybercriminals who once earned millions by breaking into individual online bank accounts are now targeting the banks’ own computers, with often-dramatic results.In Taiwan and Thailand earlier this year, the criminals programmed bank ATMs to spew cash.

Gang members stood in front of the machines at the appointed hour and collected millions of dollars.Earlier this month, the Federal Bureau of Investigation warned U.S. banks of the potential for similar attacks. The FBI said in a bulletin that it is “monitoring emerging reports indicating that well-resourced and organized malicious cyber actors have intentions to target the U.S. financial sector.” 

The FBI bulletin cited software used by a Russian gang known as Buhtrap. Computer-security specialists say Buhtrap and other gangs honed their techniques on Russian banks, then expanded to other countries. Sometimes the hackers break into the systems that process transactions on banking payment networks; other times they have hit ATM networks directly.In Taiwan, Taipei city police on July 10 received a report of currency lying on a First Commercial Bank ATM in the city’s Da’an Precinct.

Reports of loose cash at other ATMs soon followed.ATMs were “abnormally spitting out bills,” police said in a written statement a few days later.By July 11, criminals had collected more than 83 million New Taiwan dollars (US$2.6 million) in cash—without using ATM cards. Twenty-two people, most from Eastern Europe, waited by ATMs to remove the money. Three suspects were later arrested and over NT$77 million recovered.