Attacks/Breaches

2/5/2018
06:00 PM
50%
50%

Two Suspects Arrested in 'Jackpotting' Attack in Connecticut

The men were charged in federal court for alleged bank fraud using malware that empties cash from ATM machines.

US federal authorities have arrested and charged two men for alleged ATM "jackpotting" activity at a bank in Connecticut. Alex Alberto Fajin-Diaz, 31, a citizen of Spain, and Argenys Rodriguez, 21, of Springfield, Mass., were detained on Jan. 27 in Cromwell, Conn., near a compromised ATM machine that was under attack.

Citizens Bank contacted police after noticing an attack underway on its ATM, which was spitting out $20 bills. Police found Fajin-Diaz and Rodriguez nearby with more than $90,000 in cash in $20 bills. Their vehicle contained tools and electronic devices typically used in ATM jackpotting attacks.

Federal, state, and local law enforcement agencies already had been investigating jackpotting attacks in Connecticut and other states. Diebold Nixdorf and NCR, two of the world's largest ATM vendors, late last year warned their US customers about jackpotting attacks, where cybercriminals infect the machines with malware inserted into the machines that ultimately programs them to rapidly dispense cash.

The two ATM jackpotting suspects, if found guilty, face a possible sentence of 30 years in prison.

Read more on the ATM jackpotting bust here

 

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Threaded  |  Newest First  |  Oldest First
'PowerSnitch' Hacks Androids via Power Banks
Kelly Jackson Higgins, Executive Editor at Dark Reading,  12/8/2018
Windows 10 Security Questions Prove Easy for Attackers to Exploit
Kelly Sheridan, Staff Editor, Dark Reading,  12/5/2018
Starwood Breach Reaction Focuses on 4-Year Dwell
Curtis Franklin Jr., Senior Editor at Dark Reading,  12/5/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
10 Best Practices That Could Reshape Your IT Security Department
This Dark Reading Tech Digest, explores ten best practices that could reshape IT security departments.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-2486
PUBLISHED: 2018-12-11
SAP Marketing (UICUAN (1.20, 1.30, 1.40), SAPSCORE (1.13, 1.14)) does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVE-2018-2492
PUBLISHED: 2018-12-11
SAML 2.0 functionality in SAP NetWeaver AS Java, does not sufficiently validate XML documents received from an untrusted source. This is fixed in versions 7.2, 7.30, 7.31, 7.40 and 7.50.
CVE-2018-2494
PUBLISHED: 2018-12-11
Necessary authorization checks for an authenticated user, resulting in escalation of privileges, have been fixed in SAP Basis AS ABAP of SAP NetWeaver 700 to 750, from 750 onwards delivered as ABAP Platform.
CVE-2018-2497
PUBLISHED: 2018-12-11
The security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these events are part of a statement with the syntax CREATE TABLE <table_name> AS SELECT.
CVE-2018-2500
PUBLISHED: 2018-12-11
Under certain conditions SAP Mobile Secure Android client (before version 6.60.19942.0 SP28 1711) allows an attacker to access information which would otherwise be restricted.