TODAY -

ATM based frauds : Router compromise

Varun Kapoor *



Automatic Teller Machines better known as ATM’s are everywhere! They are in street corners to stores and restaurants. They are in malls, offices, airports, railway stations, bus stands and amusement parks – just about everywhere imaginable. They are one of the biggest revolutions as far as money dispensing to customers is concerned.

They are responsible for “plastic money” becoming so popular and widely used today. But are they really safe to use? Probably not, with all the different forms of ATM related frauds that are taking place in large numbers today. Extreme caution and care should be taken by the individual customer as he uses such cards and withdraws hard earned money from installed machines.

Till recently it was thought that the most prevalent form of ATM fraud was –Skimming. That was by mounting a card reader equipped with a tiny video camera on the slot of an ATM machine and with the help of this skimmer, skimming the unsuspecting victims card details and PIN number. Armed with these details a cloned card was prepared and then money withdrawn from the victims account using the clone and the recorded PIN number.

This was bad enough and the customers of ATM’s were slowly coming to know how this fraud worked and the safety precautions to be taken to prevent them becoming victims. In addition banks were also switching from the magnetic strip based ATM cards to the chip embedded cards – where such skimmers could not copy security information of the individual chip based card. Security was being enhanced and citizens were being better protected.

But when do criminals and especially cyber criminals give up – probably never!

They come up with new techniques and procedures to commit their crimes with ease, almost on a daily basis. This is what has happened in the field of ATM based crimes too. As if skimming was not bad enough – these rouge elements operating in the cyber space have come up with an ATM router based cyber crime.

In this instead of targeting an individual customers and stealing their information – bulk information theft of multiple customers has been carried out. This has been done by targeting the router of the ATM machines. This heinous crime occurred in the months of July – October 2016.

In this crime the router between a number of ATM’s was infected with a malware. This malware originated in China and money was withdrawn in USA as well as China. It affected the routers and hence card details and PIN numbers of 19 banks in India which included State Bank of India, HDFC Bank, ICICI Bank, Yes Bank etc.

It is believed that the malware first appeared in a Yes Bank router maintained by Hitachi Payment Services and then spread to other banks and their routers. The modus operandi was very simple.

The malware that infected the routers between ATM machines stole security data of customers who used the machines linked with the infected routers. In simple language the cheat was thus – when the customer inserts his/her card in the machine the security details of the card from the magnetic strip or chip is read by it and the information is collected.

The entered PIN number is also recorded. These two details then pass through the router to the bank’s server. In the server the details are verified and the “go ahead” signal is received at the ATM machine and the desired amount of cash is dispensed to the customer using the machine.

This information collection, transmission, verification and confirmation process takes just fraction of a second.

In this fraud the router which had the malware stored the card security data and the PIN number of all the customers who used that router. This entire information was then transmitted to the hacker who had inserted the malware. As a result the hacker was able to clone the card of each customer and having the PIN too, he or his group could withdraw large sums of money from each customer’s account.

In this way the ATM Router fraud compromised the card details of 32 Lakh innocent customers and the quantum of money withdrawn was to the tune of a whopping 1.03 Crores. Though the damage in terms of money lost was not very worrying – what was worrying was the scale of this data theft or compromise.

Also irksome was the ease with which this crime was committed. The banks, though slow to respond in the beginning, blocked the compromised cards and even replaced many such cards free of cost. But the damage was done and user confidence was badly hit.

A kind of fear psychosis did develop for a length of time. In this case making individual customers aware of the security precautions to be followed for safe use of ATM machines was not going to work. That was because instead of the customers this time the banks and their equipments and procedures were to be blamed for this leak and consequent crime.

The banks definitely will have to improve their security infrastructure to prevent such smart and easily carried out breaches in the future – and banks are already doing it I am sure. But what the customers need to do is set up a security regimen of their own to prevent theft of their hard earned money too.

One thing they can do is to regularly change (at least once in three months, though it is preferable every month) their PIN. That way any data leakage will not hit them hard as they would have changed their PIN and the hacker would not be able to withdraw money from a remote location as the cloned card details will not match the changed PIN. The key will not fit the lock and the consumer will be protected – this time again by HIS/HER OWN SMARTNESS.


[Views expressed in the column are of the author himself]


* Varun Kapoor wrote this article for The Sangai Express
Varun Kapoor is ADG Narcotics & PRTS Indore, MP
This article was webcasted on October 05, 2018.



* Comments posted by users in this discussion thread and other parts of this site are opinions of the individuals posting them (whose user ID is displayed alongside) and not the views of e-pao.net. We strongly recommend that users exercise responsibility, sensitivity and caution over language while writing your opinions which will be seen and read by other users. Please read a complete Guideline on using comments on this website.




LATEST IN E-PAO.NET
  • Traditional Raas Dance #1: Gallery
  • Boinaoton, Achamba :: eMing
  • Schemes of Panchayati Raj #1
  • Ego that pushes one out of the rapport
  • Meitei in Scheduled Tribe list, what ?
  • Patriotic Youth of DBC with the Nation
  • RPL trainees of Meghalaya
  • Fate of Manipur
  • No over the top glee at Meghalaya
  • Symbolism in the Tribal Art #3
  • Zasigi coIroL :: Seireng
  • CAB: Imphal I/W [12 Feb] #3: Gallery
  • Overboard 2018: Skateboarding competition
  • Palliative care as career option
  • Importance of health screenings for women
  • Intimidating media: Think before you lift
  • ST demand for Meiteis hotting up
  • Rajkumar Singhajit : Tagore Award 2014
  • Eyek Tamba :: Learn Manipuri script
  • CAB: Khwairamband [10 Feb] #2: Gallery
  • Tribes India [Exhibition] #3 : Gallery
  • 'The Wishess' wins 1st NE Multimedia
  • Why Manipur is a self-alienated society ?
  • Antibiotic mismanagement- sleeping bomb
  • Rejoinder to NDPP :: NPF
  • The unwanted season for no good reason
  • 8 in the race for Cong ticket in Inner PC
  • Mukna - Indigenous Games : Gallery
  • Internet shutdown- only solution for govt ?
  • Keisham Priyokumar's short stories? #2
  • Revive Tabanglong Village
  • Without a Womb :: Poem
  • RPL trainees of Ziro, Arunachal Pradesh
  • CAB award goes to CM ?
  • Demand release of Student Leader
  • Veewom's arrest: mockery of rule of law
  • Arduino & Raspberry-Pi workshop at ADBU
  • Lui-ngai-ni @Senapati #1: Gallery
  • Republic Day - Tableaux : Gallery
  • Marriage : Zeliangrongs & Tais #1
  • My Story :: Poem
  • Naga Peace Process :: News Timeline
  • Quest for Federalism in Myanmar : Paper
  • Gatekeeper's management mantra
  • From Democracy to Dictatorial govt
  • Fresh twist to Citizenship Bill
  • Dzukou Valley, Senapati : Gallery
  • Demand for ILP :: Articles/Photos...
  • Rules of the Road at Silicon Valley
  • What is a school meant for ?
  • Why meiteis should not be ST #3
  • Release Thokchom Veewom - II
  • Release Thokchom Veewom - I
  • Face scrubs to avoid dirt & dullness
  • SM4E Awards 2019 : Nomination open
  • After effect of CAB collapse
  • Need to look beyond CAB
  • Panel seeks support to save NH
  • Amuktang-Ga Haikho #2 : eRang
  • Exam Centre allocation for HSLC 2019
  • 3rd World Bamboo Workshop #2 : Gallery
  • Cry of a Dying River - 65 :: Poem
  • DIPR facts on Census confuse Pangals
  • Manipur Tourism: Global Mice Congress
  • Coping up with examination stresses
  • On Govt inability to present CAB
  • Breather for the North East
  • Henjunaha #2 :: Funga Wari
  • Sangai Chef: Season 1 : Gallery
  • CAB: Imphal I/W [12 Feb] #2: Gallery
  • Lui-Ngai-Ni -Naga Seed Sowing Fest
  • Inner Line Permit (ILP) Demand :: Timeline
  • Different opinions on CAB 2016
  • Change of B Voc Examination Schedule
  • Nagaland MP will vote against CAB
  • Overshadowing issues by CAB
  • RS adjourned till February 13
  • CAB: Imphal I/W [12 Feb] #1: Gallery
  • CAB: Blockade [7 Feb] #2: Gallery
  • Keisham Priyokumar's short stories? #1
  • Just a beautiful lie :: Poem
  • World Wetlands Day 2019
  • Protests against Union HRD Ministry
  • 'PDA trying to confuse Naga people'
  • The 'ban' of Internet
  • Setting date with February 12, 2019
  • NSCN (I-M) elects new leaders
  • Scientific Knowledge in Manuscript
  • Poppy destruction @CCpur : Gallery
  • Kishorechand Wangkhem's case
  • 70th Indian Republic Day #3 : Gallery
  • Hinduism and Indianess
  • CAB: Maharaj & Xenophobia :: WJ
  • Deciphering a laboratory test report
  • Stop discrimination against women
  • The falls of protracted leader
  • More than hinting CAB will be tabled
  • CAB: Khwairamband [10 Feb] #1: Gallery
  • Gaan-Ngai @Majorkhul #2 : Gallery
  • Human trafficking at Moreh
  • Why meiteis should not be ST #2
  • The Dark Light :: Poem
  • Exclusion of Pvt Teachers from HSLC
  • Pan Meetei met Ex Dy CM
  • NSS special camp 2019 concluded
  • NE to Bangkok flight from March
  • CAB: Khwairamband [9 Feb] : Gallery
  • Thamoise Foidattuna :: e-pao Radio
  • CAB Meira Rally #4 [30 Jan] : Gallery
  • Prof T Kameshwar: Reminiscence
  • Bamboo Cooking Competition: Final Day
  • Tips for healthier skin this winter
  • Sincerity matters
  • Awaiting final pact with NSCN (IM)
  • CAB: Blockade [7 Feb] #1: Gallery
  • 3rd World Bamboo Workshop #1 : Gallery
  • The panic radiated at War-Torn PAD
  • NE- Socio-Economic Development: Book
  • CAB- Consequences in Manipur
  • [ST] Demand for Constitutional Safeguard
  • 'ArP to observe Black Day during PM visit'
  • CAB date with RS on Feb 12 ?
  • Check Post (ICP) @ Moreh : Gallery
  • Tribes India [Exhibition] #2 : Gallery
  • Citizenship Bill, 2016: What to do now #4
  • It's a privilege to be a Rongmei
  • A Saviour Of My Own :: Poem
  • North East Startup Summit 2019
  • Budget : Full, half or quarter ?
  • BJP shows no concern for NE states
  • Mission schools under threat again
  • CAB : Blockade @Tiddim [6 Feb] : Gallery
  • Dolaithabi Barrage: Concealing Facts
  • 70th Indian Republic Day #2 : Gallery
  • Marketing Associates @ PiCiDi Systems
  • CAB, Political Parties and Manipur
  • The Novels Of BM Maisnamba #2
  • Employment in non-Govt sectors in Manipur
  • The board exam festival
  • NE voice on CAB: no worry for the BJP
  • Alienating natives & embracing foreigners
  • Henjunaha #1 :: Funga Wari
  • Movement against Citizenship Bill in NE
  • Bamboo Cooking Competition: Day 1 Report
  • Konthoujam Maikel (Painter) :: Profile
  • CAB Meira Rally #3 [30 Jan] : Gallery
  • Business as usual will fail on cancer control
  • Citizenship Bill: Thinking with ethics
  • STDCM reasserts Demand for ST
  • Nepal to SE Asia: Trafficking via Moreh
  • Symbolism in the Tribal Art #2
  • Aribam Syam return Padmashree to Govt
  • Cry of a Dying River - 64 :: Poem
  • Impact of AI and Robotics on Society
  • New MSAD Executive term 2019
  • Rejoinder from Shurhozelie Liezietsu -Feb 3
  • Festival to promote NE trade, tourism
  • Onetwo Okram : Singer- Profile :: eRang
  • CAB : Film Forum Protest : Gallery
  • Cultural: Republic Day #1: Gallery
  • Why Manipuri people oppose CAB? #2
  • Noting anti-CAB stand of NPP, NPF
  • CAB Gen Strike #1 [31 Jan] : Gallery
  • Match: 4th Women's Polo #3: Gallery
  • Citizenship Bill, 2016: What to do now #3
  • Truth of Manipur is inherent in nature
  • JRF required at IBSD, Imphal
  • Imoinu Erat Thouni #3 : Gallery
  • February Calendar for Year 2019 :: Tools
  • CAB Meira Rally #2 [30 Jan] : Gallery
  • The Novels Of BM Maisnamba #1
  • Screen time, effect on speech & language
  • Trainees Certificate of Lunglei, Mizoram
  • ST: Unfounded fear psychosis being spread
  • CAB Meira Rally #1 [30 Jan] : Gallery
  • CAB Protest #1 [29 Jan] : Gallery
  • Fellowship Meet of Maring Naga
  • Legal Awareness for Women leaders
  • Flowers for beauty
  • Opposing ST demand of STDCM
  • Gaan-Ngai @Namthanlong : Gallery
  • Why Manipuri people oppose CAB? #1
  • Citizenship Bill, 2016: What to do now #2
  • Oinam Shilla : Society Development Award
  • MIK (Manipuri in Kolkata) : Gallery
  • Match: 4th Women's Polo #2: Gallery
  • Why shouldn't Meitei be included in ST
  • Combing Operation @Hatta : Gallery
  • Laishram Bombayla : Padma Shri Award
  • Maisnam Renuka (Painter) : Profile
  • Thank You Note: Khumukcham Sanjita
  • Gaan-Ngai - festival of Kabui #2
  • Imoinu Erat Thouni #2 : Gallery
  • Rongmei and Kabui are one
  • Rani Khidir : Kalaritu (Laiyekpa) : Profile
  • Match: 4th Women's Polo #1: Gallery
  • Ranjit Ningthouja : Profile of a playwright
  • Imoinu Erat Thouni #1 : Gallery
  • Dr Thokchom Asha: Teacher Award
  • Purnima Ngangom (Printmaker) :: Profile
  • The Killing Fields 2013-18 : News Timeline
  • New Year picnic at Sekmai #2: Gallery
  • Manipuri Calendar for 2019 : Download
  • Featured Front Page Photo 2018 #6: Gallery
  • Irengbam Bedamani - Actress :: eRang
  • List of Restricted Holidays for 2019
  • List of Public Holidays for 2019
  • List of General Holidays for 2019
  • Fabrics of Bangladeshi Manipuri: Download
  • Old Manipuri Movie #1 :: eRang Classic
  • SPONSORED ADS