Eastern European hackers swindle millions from Thai ATMs

[buksida]

AN Eastern European gang of cyber thieves recently made off with over 12 million baht (US$350,000) stolen from ATMs across Thailand owned by Government Savings Bank (GSB).

According to authorities, the perpetrators allegedly exploited vulnerabilities in the ATMs’ software using malware, enabling them to withdraw the cash held by the machines.

The thefts occurred between Aug 1 and 8, hitting 21 ATMs in six provinces, but were only revealed by bank officials this week. The bank has since shut down half of its 7,000 ATMs across the country.

However, GSB officials have reassured its customers that the theft had not affected any bank accounts.

“The robbery of the GSB’s ATMs was to steal the money that belonged to the bank, not the customers,” said the bank’s chief executive Chatchai Payuhanaveechai, as reported by Khaosod English.

“We will seek the damage from the manufacturer of the ATM machines,” he added.

The ATMs which were targeted by the gang were made by a company called NCR.

In light of the cyber heist, Thailand’s Central Bank has warned all commercial banks in the country that ATMs produced by NCR were susceptible to such attacks. There are an estimated 10,000 cash machines produced by the company.

Source: https://asiancorrespondent.com/2016/08/ ... -atm-hack/

[charlesh]

So what happened to the CCTV and watch on departures processes at country exit points. I'm sure T Bht goes down well in romania, albania etc.

[PeteC]

There's been a correction in the story today saying that the police have now determned that Thais were involved as well, not just foreigners. Pete

[hhinner]

It says in the OP, the thefts occurred during 1st to 8th August. It's a bit late to be making a kerfuffle about it now, isn't it? I also doubt that only ATMs from NCR are susceptible. Fat chance claiming anything from NCR unless the bank can prove it wasn't negligent in its security. Running Windows XP maybe? Locally customised code without security flaws? Suitable ATM model for location? Proper support contract with NCR? Etc.

[HHTel]

It now appears according to the police that the atm card used was from England!

Source:http://www.thairath.co.th/content/704730

[redzonerocker]

It now appears according to the police that the atm card used was from England!

That makes sense considering most of Eastern Europe's criminals currently reside here.

[hhfarang]

"Sophisticated malware possibly tied to recent ATM heists in Thailand"

http://www.pcworld.com/article/3113152/ ... iland.html