[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4m1WsLTG92vATAcfOGd2iynezuFXmdAXggzHdoeGDZo":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"status":22,"created_at":23,"published_at":24,"article":25,"tags":29,"podcasts":48},"24baecb9-6886-4ebe-bca4-665cc3be47b8","atm-jackpotting-gang-exploits-unpatched-machines-across-the-us","7e4920b2-bbf0-4009-bf8d-10669ff57dab","ATM Jackpotting Gang Exploits Unpatched Machines Across the US","Five Venezuelan nationals pleaded guilty to ATM jackpotting attacks — a technique where malware is installed on ATMs to force them to dispense cash on demand. The attackers specifically targeted machines they believed were running outdated or vulnerable software, highlighting the critical danger of unpatched ATM infrastructure. Physical access to ATMs combined with software vulnerabilities creates a potent attack vector that can result in significant financial losses for banks and businesses. This case also demonstrates the value of surveillance and logging systems, as footage was instrumental in identifying and apprehending the suspects. Financial institutions must treat ATM security with the same rigor applied to enterprise IT systems.","**Immediate actions:**\n- Audit all ATM software versions and immediately patch or upgrade any machines running outdated operating systems or firmware.\n- Review physical security controls on ATMs (locks, tamper-evident seals, enclosures) to prevent unauthorized hardware access.\n\n**Long-term improvements:**\n- Implement a formal vulnerability management program specifically covering ATM and point-of-sale infrastructure with regular scheduled assessments.\n- Establish network segmentation to isolate ATM networks from general corporate and internet-facing networks.\n- Work with ATM vendors to enforce application whitelisting so only authorized software can execute on ATM hardware.\n\n**Detection measures:**\n- Deploy and retain high-resolution surveillance footage at all ATM locations with alerts for unusual after-hours physical activity.\n- Implement real-time monitoring for anomalous ATM cash dispense events or unexpected cash-out patterns and route alerts to a SOC for immediate triage.",[12,13,14,15,16,17,18,19,20,21],"CIS Control 2 – Inventory and Control of Software Assets","CIS Control 7 – Continuous Vulnerability Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-82 – Guide to ICS\u002FOT Security","NIST SI-2 – Flaw Remediation","NIST AC-3 – Access Enforcement","NIST AU-6 – Audit Record Review and Analysis","PCI DSS Requirement 6 – Develop and Maintain Secure Systems","PCI DSS Requirement 9 – Restrict Physical Access to Cardholder Data","PCI DSS Requirement 10 – Log and Monitor All Access to System Components","published","2026-09-01T10:20:37.460549+00:00","2026-09-01T10:20:37.378+00:00",{"id":7,"url":26,"slug":27,"title":28},"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Ffive-venezuelans-plead-guilty-to-atm-jackpotting-attacks-in-us\u002F","five-venezuelans-plead-guilty-to-atm-jackpotting-attacks-in-us-e47d03","Five Venezuelans plead guilty to ATM jackpotting attacks in US",[30,36,42],{"id":31,"name":32,"slug":33,"description":34,"color":35},"05757c8d-6b93-4194-b35d-7359e7d33b0e","Vulnerability Management","vulnerability-management","Missing scans, no risk prioritization","#fb923c",{"id":37,"name":38,"slug":39,"description":40,"color":41},"1732a005-556e-411c-a9db-5edec3058571","Logging & Monitoring","logging-monitoring","Missing logs, no alerting, blind spots","#a855f7",{"id":43,"name":44,"slug":45,"description":46,"color":47},"af7fce9e-1ce8-4156-93bc-09dcfbfdf29d","Patch Management","patch-management","Unpatched vulnerabilities, delayed updates","#ef4444",[]]