![]() The Triton attack was made possible by a security flaw that allowed unauthorized programs to execute on the system. Jack said he believes about 95 percent of retail ATMs are on dial-up a hacker could war dial for ATMs connected to telephone modems, and identify them by the cash machine’s proprietary protocol. To conduct the remote hack, an attacker would need to know an ATM’s Internet IP address or phone number. Tranax’s remote monitoring system is turned on by default, but Jack said the company has since begun advising customers to protect themselves from the attack by disabling the remote system. The Tranax hack was conducted using an authentication bypass vulnerability that Jack found in the system’s remote monitoring feature, which can be accessed over the Internet or dial-up, depending on how the owner configured the machine. ![]() ![]() The two systems he hacked on stage were made by Triton and Tranax. Hacking ATMs to spit out money, demonstrated at the Black Hat conference:
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
June 2023
Categories |