Security researcher sounds alarm over ATM NFC reader vulnerabilities

[CyberTech]

Content source

https://www.theverge.com/2021/6/28/22553646/atm-point-of-sale-nfc-readers-hack-security-vulnerability-jackpotting

IOActive security researcher Josep Rodriquez has warned that the NFC readers used in many modern ATMs and point-of-sale systems are leaving them vulnerable to attacks, Wired reports. The flaws make them vulnerable to a range of problems, including being crashed by a nearby NFC device, locked down as part of a ransomware attack, or even hacked to extract certain credit card data.

Rodriquez even warns that the vulnerabilities could be used as part of a so-called “jackpotting” attack to trick a machine into spitting out cash. However, such an attack is only possible when paired with exploits of additional bugs, and Wired says it was not able to view a video of such an attack because of IOActive’s confidentiality agreement with the affected ATM vendor.

Full article

Security researcher sounds alarm over ATM NFC reader vulnerabilities

He was able to crash a Madrid ATM using a smartphone.

www.theverge.com