August 02, 2010

How he attacked ATMs: Barnaby Jack press conference at Black Hat 2010

Barnaby Jack, director of security research at IOActive Labs, fields questions from the press shortly after wowing the Black Hat 2010 crowd with a talk about ATM vulnerabilities, both remote and local, that can allow attackers to retrieve free cash from the machines. In the press conference, Jack describes how he perpetrated the exploits. He references "Dillinger," an attack tool named after the infamous 1930s bank robber that he used to exploit one of the vulnerabilities — an issue in the remote monitoring authentication process, which is turned on by default in most machines made by manufacturer Tranax.
Related Articles

More in Videos

Video: The continued rise of DDoS

In this video, Ashley Stephenson, CEO at Corero Network Security, discusses the development of DDoS attacks, as well as how security professionals can grapple with the challenges the threat poses.

Video: The risks surrounding digital certificates

In this video, Jeff Hudson, CEO at Venafi, discusses the importance of digital certificates, as well as the threats surrounding forged ones should they be used in an attack against an organization.

Video: The challenges third-parties pose for SMBs

In this video, Marcos Colón, digital content coordinator at SC Magazine, sits with Charles Henderson, director of SpiderLabs at Trustwave, to discuss the growing challenges that SMBs face with third-parties that may put an organization's data at risk.