HOW TO BREAK INTO A CASH MACHINE

How To Break Into A Cash Machine
Comments

HOW TO BREAK INTO A CASH MACHINE



Written by Onjuli Datta
09 Monday 09th August 2010

Finally, our collective wish has been granted. There is a way to make cash machines spit out money and play music. And it’s done with stuff you can buy online. Barnaby Jack (yes, that is his real name) was another DefCon speaker on a crusade against security. He did pretty well.

Through a little complex coding know-how and a $100 hardware kit, Jack hacked into three different ATM machines. He said, "Every ATM I've looked at, I've found a 'game over' vulnerability that allowed me to get cash from the machine." With one of them, Jack physically broke in with a key he’d bought on the internet and managed to change the display and make it play a tune – while churning out money, of course. In another demo he broke in remotely using an internet phone link.

It’s actually possible to find a machine just by using a computer to call random phone numbers. Jack managed to find his targets in a few hours, just through automatically searching 10,000 numbers. From there, you can install a ‘rootkit’ and control the whole thing remotely. Later on you go to the machine with a fake card, take what you want, and saunter smugly away. 
 
Sadly for us, Jack didn’t divulge every detail on the break-ins, so don’t look forward to your own mini-heist any time soon. Jack has already contacted two of the companies about fixing their security flaws. "I want to change the way people look at devices that are seemingly impenetrable," he said. But not by making them impenetrable for everyone, unfortunately.

Don't Panic attempt to credit photographers and content owners wherever possible, however due to the sheer size and nature of the internet this is sometimes impractical or impossible. If you see any images on our site which you believe belong to yourself or another and we have incorrectly used it please let us know at panic@dontpaniconline.com and we will respond asap.



Comments

MORE FROM DON'T PANIC