A
cybercrime expert said all you need is a RM100 chip, some technical knowledge
and free malware obtained over the Internet to hack Automated Teller Machines
(ATMs).Speaking exclusively to FMT in regard to the recent hacking of 17 ATMs,
he said, “What you need is a mastermind, a RM100 computer chip and possibly a
bank ‘insider’ to execute the attacks.”
Explaining
the intricacies of the hacking, he said, “He (the hacker) will know where the
locks and connections are, the model of the machine, the level of security and
the version of the operating system.”He added that the mastermind would then
employ someone else to do the work.He pointed out, “The guys caught on the CCTV
are not the actual criminals.
ATMs
at three more bank branches have been hacked and almost RM450,000 (S$175,000)
stolen as police launched a nationwide hunt for the Latin American suspects
responsible for the thefts.The spate of ATM hacks continued with the United
Overseas Bank (UOB) branch in Jalan Imbi yesterday reporting a RM92,900 theft
by one of the hackers.
Statistics
from industry bodies provided by Lau’s firm revealed that Malaysia had an
average of 17.66 phishing sites per 1,000 host computers, three times higher
than the global average of five per 1,000 host computers.Lau said banks in
Malaysia had a “basic layer” of protection for their online and mobile banking
platforms, but added banks needed to respond accordingly as threats are
becoming more sophisticated.
While
acknowledging that the lack of technology upgrades could be a contributing
factor to the security systems breach, the expert also believed the
lackadaisical attitude of banks was the underlying reason for the spate of ATMs
hackings.The expert also highlighted several other weaknesses that surfaced.
Among them were the use of outdated ATM operating systems like Windows
XP. Banks have been taking things for granted because nothing like this
has ever happened before.
