ATMs are more vulnerable than you might expect. They can also be attacked using a smartphone

Attackers have been attacking ATMs for many years and in all sorts of ways, such as hacking inside or hacking with a simple USB key. Josep Rodriguez, a researcher and consultant at the security company IOActive, has now found a set of bugs that allowed him to hack ATMs and payment terminals in a new and easier way – using NFC. The Wired portal informed about the topic.

ATMs can be attacked in various ways using NFC

Thanks to NFC, all you have to do is attach the payment card to the reader when making or withdrawing money. However, Rodriguez found that the system contained many vulnerabilities. He created an Android application that allows him to force the failure of terminals and ATMs, hack them to collect and transfer other users’ credit card data, change the value of transactions without a trace, and even lock devices using ransomware. Rodriguez also claims that he was able to use this application to force one bank’s ATM to start issuing cash headlong.

“When you pay, you can change the price to one dollar, for example, even if the screen shows you’re paying $ 50. You can block the device or install ransomware on it. These mistakes can be exploited in various ways, “says Rodriguez about the mistakes he discovered.

Some of them may still be vulnerable

Rodriguez warned the affected company about a year ago. However, some ATMs may still be affected as they have to be updated manually and require so much time with so many ATMs.

Rodriguez did not disclose the specific errors that allowed him to attack ATMs and payment terminals, but plans to hold a webinar in the coming weeks to alert ordinary people to the problem. He also hopes that these people will put pressure on the companies concerned to remedy the problem as soon as possible.

“These security flaws have been around for years, and we still use these devices every day to manage our money,” Rodriguez added. “They must be secured.”