New hack lets hackers control ATMs remotely to make it rain

TOKYO— Japanese cybersecurity firm Trend Micro has published a white paper detailing how hackers can remotely control ATMS.

According to Trend Micro, cybercriminals target banking staff with phishing emails. If a worker accesses the email, this allows the hacker to steal their identity. The hacker then uses the stolen digital credentials to enter the banking network where they begin to comb it for data on their target.

This is known as lateral movement. The hack is commonly seen in places where banks' main networks and ATM networks are not separated. Once that data is acquired, the hacker gains access to ATMs. They then order machines to dispense so-called "jackpot" amounts of cash to standby mules, waiting to collect.

Hackers using this technique have kept away from ATMs in the US and Canada, but Trend Micro expects the threat to become stronger in the future.