Categories

Login

Security >>>

Local banks lacking security protection. The trojan horse was released in May 2014.

The ATM hacks are not high-tech operation, the syndicate only used the trojan horse malware freely available in internet since last May. There are at least four leak holes found in those compromised ATMs.

1. Top panel can be opened freely.

2. No alarm to alert bank security.

3. The memory card slot is not secured.

4. No antivirus and Windows OS, mainly Windows XP timely updates to protect against the trojan horse malware.

5. No security personnel to look out the ATMs.

Above leaks indicate poor security policy and maintenance culture in certain local banks.

How we consumers put our trust on these banks to protect our money and personal data security?

No customer accounts compromised by ATM hacks, says ABM

ATM hacks

BY NICHOLAS CHENG

KUALA LUMPUR: No customer account balances were compromised during the spate of automated teller machine (ATM) hacks in Affin Bank, Al Rajhi Bank and Bank Islam over the weekend, said the Association of Banks Malaysia.

Executive director Chuah Mei Lin said member banks were now stepping up efforts on security to protect customers’ data, following reports of ATMs in 14 bank branches in Selangor, Johor and Malacca being hacked by a Latin American gang, who stole over RM3 mil in just two days.

“The Association of Banks in Malaysia wishes to assure the public that our member banks with ATM networks are collaborating closely with the relevant authorities with regard to the recent cases of ATM heists.

“Members of the public are welcome to contact us at our ABMConnect hotline by dialing 1-300-88-9980 or emailing us at eABMConnect by logging on to our website, www.abm.org.my,” she said in a statement, Tuesday.

In a new development, Bukit Aman Commercial Crime Investigation Department chief Comm Datuk Mortadza Nazarene told Bernama that the suspects used a computer malware known as “ulssm.exe” to hack into the ATMs.

“The suspects were found to have opened the top panel of the machine without using a key and inserted a compact disc into the machine’s processing centre which caused the ATM’s system to reboot,” he told Bernama, Tuesday morning.

He said they then used a keyboard to hack into the system and take out money. According to him, information obtained from the systems engineer of a bank indicated that up to 40 notes could be taken out in a single transaction using the method.

A special squad comprising officers from Bukit Aman and state contingents have been deployed under Ops Godam ATM.

Bukit Aman Commercial Crimes Investigation Department deputy director (Cyber and Multimedia Crimes) SAC Mohd Kamarudin Md Din said the gang members were still believed to be in the country.