By Ionut Arghire on January 12, 2017 A new variant of the Ploutus ATM (automated teller machine) malware was recently observed, capable of interacting with KAL’s Kalignite multivendor ATM platform, FireEye security researchers warn.
Dubbed Ploutus-D, the new variant is targeting machines from ATM vendor Diebold, but FireEye says that the list of targets could greatly expand with only a few code changes. The Kalignite Platform runs on 40 different ATM vendors in 80 countries, making the new malware variant a great threat.
Full Article
New Ploutus ATM Malware Variant at Large
Userlevel 7
+54
Userlevel 7
Would be interesting to know what OS the ATMs suceptible to this nasty are in fact running, and when the ATM manufacturers are going to go to the trouble of upgrading their software to run on more secure ones. :@
Userlevel 7
+35
"Ploutus-D can run on ATMs running Windows 10, Windows 8, Windows 7 and XP"@ wrote:
Would be interesting to know what OS the ATMs suceptible to this nasty are in fact running, and when the ATM manufacturers are going to go to the trouble of upgrading their software to run on more secure ones. :@
-Dan
Userlevel 7
Well, that is interesting to know...thanks for clarifying...but surely running on a newer OS will not be as easy as running on an older, inherently less secure one? :D
Userlevel 7
+35
In this case it does not matter which OS it is running on since an attacker needs physical acceess to the ATM in order to install and interact with the malware.@ wrote:
Well, that is interesting to know...thanks for clarifying...but surely running on a newer OS will not be as easy as running on an older, inherently less secure one? :D
The blog post that the article linked in the OP was based on provides more detailed technical information:
https://www.fireeye.com/blog/threat-research/2017/01/new_ploutus_variant.html
-Dan
Userlevel 7
Cheers, Dan...very interesting. Much obliged.
Baldrick
Baldrick
Reply
Login to the community
No account yet? Create an account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.