TODAY -

ATM based frauds : Router compromise

Varun Kapoor *



Automatic Teller Machines better known as ATM’s are everywhere! They are in street corners to stores and restaurants. They are in malls, offices, airports, railway stations, bus stands and amusement parks – just about everywhere imaginable. They are one of the biggest revolutions as far as money dispensing to customers is concerned.

They are responsible for “plastic money” becoming so popular and widely used today. But are they really safe to use? Probably not, with all the different forms of ATM related frauds that are taking place in large numbers today. Extreme caution and care should be taken by the individual customer as he uses such cards and withdraws hard earned money from installed machines.

Till recently it was thought that the most prevalent form of ATM fraud was –Skimming. That was by mounting a card reader equipped with a tiny video camera on the slot of an ATM machine and with the help of this skimmer, skimming the unsuspecting victims card details and PIN number. Armed with these details a cloned card was prepared and then money withdrawn from the victims account using the clone and the recorded PIN number.

This was bad enough and the customers of ATM’s were slowly coming to know how this fraud worked and the safety precautions to be taken to prevent them becoming victims. In addition banks were also switching from the magnetic strip based ATM cards to the chip embedded cards – where such skimmers could not copy security information of the individual chip based card. Security was being enhanced and citizens were being better protected.

But when do criminals and especially cyber criminals give up – probably never!

They come up with new techniques and procedures to commit their crimes with ease, almost on a daily basis. This is what has happened in the field of ATM based crimes too. As if skimming was not bad enough – these rouge elements operating in the cyber space have come up with an ATM router based cyber crime.

In this instead of targeting an individual customers and stealing their information – bulk information theft of multiple customers has been carried out. This has been done by targeting the router of the ATM machines. This heinous crime occurred in the months of July – October 2016.

In this crime the router between a number of ATM’s was infected with a malware. This malware originated in China and money was withdrawn in USA as well as China. It affected the routers and hence card details and PIN numbers of 19 banks in India which included State Bank of India, HDFC Bank, ICICI Bank, Yes Bank etc.

It is believed that the malware first appeared in a Yes Bank router maintained by Hitachi Payment Services and then spread to other banks and their routers. The modus operandi was very simple.

The malware that infected the routers between ATM machines stole security data of customers who used the machines linked with the infected routers. In simple language the cheat was thus – when the customer inserts his/her card in the machine the security details of the card from the magnetic strip or chip is read by it and the information is collected.

The entered PIN number is also recorded. These two details then pass through the router to the bank’s server. In the server the details are verified and the “go ahead” signal is received at the ATM machine and the desired amount of cash is dispensed to the customer using the machine.

This information collection, transmission, verification and confirmation process takes just fraction of a second.

In this fraud the router which had the malware stored the card security data and the PIN number of all the customers who used that router. This entire information was then transmitted to the hacker who had inserted the malware. As a result the hacker was able to clone the card of each customer and having the PIN too, he or his group could withdraw large sums of money from each customer’s account.

In this way the ATM Router fraud compromised the card details of 32 Lakh innocent customers and the quantum of money withdrawn was to the tune of a whopping 1.03 Crores. Though the damage in terms of money lost was not very worrying – what was worrying was the scale of this data theft or compromise.

Also irksome was the ease with which this crime was committed. The banks, though slow to respond in the beginning, blocked the compromised cards and even replaced many such cards free of cost. But the damage was done and user confidence was badly hit.

A kind of fear psychosis did develop for a length of time. In this case making individual customers aware of the security precautions to be followed for safe use of ATM machines was not going to work. That was because instead of the customers this time the banks and their equipments and procedures were to be blamed for this leak and consequent crime.

The banks definitely will have to improve their security infrastructure to prevent such smart and easily carried out breaches in the future – and banks are already doing it I am sure. But what the customers need to do is set up a security regimen of their own to prevent theft of their hard earned money too.

One thing they can do is to regularly change (at least once in three months, though it is preferable every month) their PIN. That way any data leakage will not hit them hard as they would have changed their PIN and the hacker would not be able to withdraw money from a remote location as the cloned card details will not match the changed PIN. The key will not fit the lock and the consumer will be protected – this time again by HIS/HER OWN SMARTNESS.


[Views expressed in the column are of the author himself]


* Varun Kapoor wrote this article for The Sangai Express
Varun Kapoor is ADG Narcotics & PRTS Indore, MP
This article was webcasted on October 05, 2018.



* Comments posted by users in this discussion thread and other parts of this site are opinions of the individuals posting them (whose user ID is displayed alongside) and not the views of e-pao.net. We strongly recommend that users exercise responsibility, sensitivity and caution over language while writing your opinions which will be seen and read by other users. Please read a complete Guideline on using comments on this website.




LATEST IN E-PAO.NET
  • Manipuri Calendar for 2018 : Download
  • Lamyanba Irabot- Floral Tribute #2: Gallery
  • A scientific view to uniqueness of Kangla
  • Citizenship Bill 2016: An unjust Bill
  • Developing a database on bio-resource #1
  • The Killing Fields 2013-18 : News Timeline
  • Flight at the land of clouds :: Poem
  • Stop occupation at Moreh Chikim village
  • Contribution of Rani Gaidinliu
  • Police Day Marathon #2: Gallery
  • Kayada Ningthijaba Eseino :: Review
  • Stop religious encroachment of Kangla
  • Cry of a Dying River - 50 :: Poem
  • Money- laundering and juveniles
  • To drive or to be driven
  • The barricade cordoning CMO
  • October 31 rally : Manipur is a reality !
  • Mera Chaorel Houba #2 : Gallery
  • Anglo-Kuki War 1917-19 : Gallery
  • Tribes, Castes & Development :: Book
  • Durga Puja celebration in Manipur
  • Multidrug-Resistant Tuberculosis
  • Life did put me into darkness :: Poem
  • Matrimonial sites: Dangerous proposals
  • Absentee in history
  • Of KTC and demand of UMLA
  • Pari Imom (Film Scenes) #1 :: eRang
  • Chunglenyanba, Awa Leima :: eMing
  • Manipur State Constitution Act, 1947 #1
  • 7th anniversary of PCRM
  • Funding TB response is smart investment
  • The Broken Stone:: Poem
  • 15 Ceremonial Horses handed to Myanmar
  • Needs for realizing the truth
  • Time to put education on track
  • Bor khoiramba @Hiyangthang #1 : Gallery
  • Kuki Black Day: desperation to Nagas #2
  • Finance knowledge to make better decision
  • Naga Peace Process :: News Timeline
  • Bunglawn Remembers Dr Kalam's Visit
  • No baab tree :: Poem
  • Official website of Sangai Photo Festival
  • Beauty care with natural ingredients
  • Deportation of Rohingya against intl law
  • Noting efforts to put MU on track
  • MU: Teachers/students released : Gallery
  • Death Anniv - Bhagyachandra #3 : Gallery
  • Ithai Barrage Impact on Environment
  • Rural development as career option
  • Put the kibosh on ochlocracy
  • Chronic Kidney Disease (CKD) in women
  • India International Cherry Blossom Festival
  • Marketing Assistant @ PiCiDi, Canchipur
  • 'Ram Madhav is wrongly briefed' : NPF
  • Uniforms for school teacher: What purpose?
  • Marangwon at @Mt Khorung #3 : Gallery
  • Police Day Marathon #1: Gallery
  • I call it life :: Poem
  • International day for Disaster reduction
  • Contested territorial demands in Manipur
  • WhatsApp & mobile usage study results
  • Physics Programme in Nowgong College
  • Rejoinder to NDPP [15 October]
  • Stop bluffing Nagas
  • The state of the states
  • Gearing up for Oct 31 rally
  • Historical Evaluation of Puya Meithaba #4
  • MU: Student/police clash -10 Oct #2: Gallery
  • X-Jam -Extreme Sports & Music festival
  • Urban Local Govt in Mizoram :: Book
  • 3 perspectives in context of present Manipur
  • Figures in the Shadows :: Poem
  • To UNC, Zomi Council, Hmar Inpui on ST
  • HC acted in good faith for MU
  • Jarnail Singh @ MU : Gallery
  • Heikru Hidongba #3 : Gallery
  • The undeniable subtlety of Atingkok
  • Kuki Black Day: desperation to Nagas #1
  • Let me shower moonlight :: Poem
  • On allegations issued by NPF : NDPP
  • Challenges to the digital dreams
  • Eyes now on K Yugindro
  • Lamyanba Irabot- March Past #3: Gallery
  • Death Anniv - Bhagyachandra #2 : Gallery
  • Meetei Tribe wont grab land of Hill Tribes
  • Making a tangible difference
  • Contradicted journey of IPC Section 377
  • Free open defecation & open pee
  • Act East & Importance of Myanmar & NE
  • Vacancies at Multimind Software
  • Waiting for "Sorry"
  • Out Yugindro in Jarnail Singh
  • Mera Chaorel Houba #1 : Gallery
  • AMAND Pune: Cultural evening : Gallery
  • Management Convergence at Mizoram Univ
  • Observation of World Mental Health Day
  • Cry of a Dying River - 49 :: Poem
  • Buddhism is free from compulsion...
  • 7th AGM / Cultural evening of AMAND, Pune
  • Forsaken farmers - food for thought
  • Second police raid at MU
  • NESO opposes Indo-Nepal Treaty in NE
  • British Council, NEC sign MoU
  • MU: Student/police clash -10 Oct #1: Gallery
  • Death Anniv - Bhagyachandra #1 : Gallery
  • Anglo-Kuki War 1917-1919
  • University :: Poem
  • Remembering class boycott 2009-2010
  • Hair stylist as career option #2
  • Training of Trainers on Gender Justice
  • Manipur University fresh violence by police
  • MU Crisis- admissions and omissions
  • Issues besetting State before LS polls
  • Langban Heitha Leithaba #2 : Gallery
  • Sizo Festival @Saikot : Gallery
  • Opening of Moreh-Tamu Border Gate
  • Forest Cover of Nagaland :: Book Review
  • Ingocha Chingtham: Cycling from Mumbai ..
  • Blood Transfusion service- future in Manipur
  • IT Enabled Employment Generating Course
  • NDPP condemns statement of NPF
  • Beyond the reality
  • Need for MUTA to approach Court
  • Kang Tournament @Kongba #2: Gallery
  • Elangbam Sonamani : Sahityaratna 2017
  • Celebrating the rights of wildlife- Are we
  • The sky's gone wonderful :: Poem
  • Communal Harmony and Integration
  • Opportunity for India in Indo-Pacific Region
  • To be a good man
  • Education : Why no private players here ?
  • Tarpon Sonba : Gallery
  • mtM :: Seireng
  • MN Singh promoted as IG of CBI felicitated
  • Loktak from different perspectives #2
  • The Journey of Happiness :: Poem
  • A personal discourse of Manipuri people
  • Improper use of loud speakers in Manipur
  • Art Exhibition @Art College #3: Gallery
  • Sudip Kongbrailatpam -recording engineer
  • Dismantled 9th times & safer in 10th times
  • Remembering Irawat: Are we following ..
  • State Level Archery Championship 2018
  • Stop religious encroachment at Kangla
  • Navratri (festival) make up
  • khongjang changsinnaba sem sarey : ST
  • MU crisis: Emerging questions
  • Lining up five days blockade
  • Dhol Chollom @Sangai Fest: Gallery
  • A Road Trip to Myanmar #2
  • Maroi napakpi in Manipuri dishes
  • National Integration Tour Team
  • Cry of a Dying River - 48 :: Poem
  • Ending antimicobial resistance to #endTB
  • Condoles death of Pu Kaikhokam Kipgen
  • Rejoinder to NDPP (5th Oct) : NPF
  • Responsibility required - not restriction
  • After Thuingaleng Muivah who ?
  • Paddy dry up due to deficit rainfall
  • Lamyanba Irabot- March Past #2: Gallery
  • Binalakshmi Nepram : RAW in WAR Award
  • Agribusiness & Carbon Management : Book
  • Is Gandhi (ian) relevant today ?
  • Guidelines for Hostels for Children
  • ATM based frauds : Router compromise
  • 'Rio's announcement as just mockery'
  • Training Program on Mushroom Cultivation
  • 'Chadong' - the victim of development
  • Poles apart : Pandey and Singh
  • Manipuri Diaspora in Myanmar #2
  • Why has Egg become Danger for Manipur?
  • Speech by Atif Anik on Irabot Day 2018
  • Wounded tree :: Poem
  • Hair stylist as career option
  • Synopsis of Sizo Festival 2018
  • Traffic regulation still a Flop show
  • In the evening of his life : Th Muivah
  • Langban Heitha Leithaba : Gallery
  • World Bamboo Day #2: Gallery
  • Where have all the lights gone ?
  • Mahatma and non-violence
  • Detention of students/professors of MU
  • Gandhi Jayenti at Itanagar
  • IBSD cleans Imphal City
  • MU: Abide by wisdom of Sr citizens
  • Power of humility
  • Ghost of Pandey : Four teachers suspended
  • Lamyanba Irabot- March Past #1: Gallery
  • October Calendar for Year 2018 :: Tools
  • Looking at Loktak from perspectives #1
  • Morning - a Haiku :: Poem
  • R&V Art House curates 'Land of Polo'
  • Show for football fans at NEUFC Fan Park
  • Indigenous People: Stand against Fascist
  • Clarification on Tamei Residential School
  • Organic Farming Tour to Sikkim
  • System error- or is this real democracy
  • Autonomy for Naga- Stakeholders on board
  • Th. Muivah hospitalized
  • Choidev Chongba @Kang Fest : Gallery
  • A Road Trip to Myanmar #1
  • The day after Sahnit-Ni
  • ..but Irabot may still shed tears in heaven
  • Heikru Hidongba #2 : Gallery
  • Lamyanba Hijam Irabot :: Read all about
  • Tingmila Doungel : Manipuri Boxer
  • Tarpon: Annual offerings to dead by living
  • Historical Evaluation of Puya Meithaba #3
  • MU: General Srtike [27 Sep] #2 :: Gallery
  • Irabot's letter to Assembly :: 18 Oct 1948
  • Ringui Village, Ukhrul :: Gallery: Gallery
  • Front Page Photo 2018 #4: Gallery
  • Tuilha Kol waterfall #2: Gallery
  • Eyek Tamba :: Learn Manipuri script
  • Sit-In: Naga Peace Talk #2 : Gallery
  • Inner Line Permit (ILP) Demand :: Timeline
  • Jangou Rah : eRang Classic
  • Manglandasu Nang - OST :: e-pao Radio
  • Old Manipuri Movie #1 :: eRang Classic
  • SPONSORED ADS