The attacks, which took place over several months, involved the actors installing malware on the target ATMs and using special tools to trigger what is known as a "jackpotting" sequence — a technique that effectively turns the machine into a cash dispenser without requiring a card. Court documents indicate the group operated in coordination, with some members acting as installers and others serving as drivers or lookouts during the heists.

The defendants now face sentencing after entering their guilty pleas, with each potentially facing years in federal prison. The case highlights the ongoing threat posed by organized groups using hardware and software tools to compromise physical banking infrastructure, a trend that has prompted increased security measures by ATM manufacturers and financial institutions.

Key details from the case include:

• The defendants are all Venezuelan nationals, though no further personal identifiers were provided in the plea agreements.
• The jackpotting method used in these attacks is consistent with known malware families designed specifically for ATM compromise, though no specific CVE or advisory identifier was cited in the reporting.
• The group is believed to have targeted ATMs across multiple U.S. states, with losses mitigated by rapid response from law enforcement and ATM operators.
• Sentencing hearings have not yet been scheduled, but the guilty pleas are expected to expedite the legal proceedings.

Source: BleepingComputer

Is your organization taking any extra precautions to secure standalone ATMs against physical tampering and malware-based jackpotting attacks?