ATM Fraud: Cyber attackers first place a device between the ATM machine and the router. This device has the ability to change the response coming from the authorization host (ATM switch).
Banks have been alerted to the recent rising incidents of man in the middle (MiTM) attack on ATMs in various states of the country. With this trick, criminals are being successful in withdrawing cash from ATMs. In such a situation, all banks have been asked to increase the safety norms of ATMs. According to officials, banks have been asked to make ATMs secure in their networks through end-to-end encryption. Banks have been alerted by both the Central Government and the RBI and instructions have been given to take measures in this direction.
In recent times, the cases of cyber fraud are increasing. Cyber criminals are adopting new tricks for fraud involving digital transactions. It is said to be very cautious while withdrawing money from ATM. There are many tricks, through which cyber criminals can cheat you. In such a situation, the central government and the RBI have given security instructions to the banks.
MiTM Attack: Forgeries Withdraw Cash Through These Methods
The central government has told all banks that MiTM attacks at ATMs have increased. Under the MiTM attack, attackers change the messages sent from ATM switches to ATM hosts and withdraw cash in a fraudulent manner. An investigation by security agencies has revealed that cyber criminal gangs have started using this new tactic to withdraw money from ATMs. A security officer aware of such incidents has given this information.
This is how cyber criminals withdraw cash from ATMs
According to investigators, the fraudsters first tamper with the ATM’s network cable. Declined messages are exchanged with ATM switches and are successfully processed with cash withdrawal transactions. After this, cash is withdrawn from the ATM.
Cyber attackers first place a device between the ATM machine and the router. This device has the ability to change the response coming from the authorization host (ATM switch). After this, the attackers use a blocked card or blocked card to withdraw cash.
Banks ensure end-to-end encryption
In view of the use of this method of fraudsters, the authorities have instructed banks to ensure the end-to-end encryption of communication between ATM terminals or PCs and ATM switches. End-to-end encryption means the use of a code language from beginning to end. Banks have been told that network cables, input or output ports in ATM premises should be hidden and should be secure. Similar advice has also been issued by the Reserve Bank.
2.90 lakh cases of cyber security
According to information from the CERT-In, the Indian Computer Emergency Response Team, in 2018, there were a total of 1,59,761 incidents related to cyber security. The number of such incidents in 2019 stood at 2,46,514, while in 2020 the number of these incidents reached 2,90,445. These incidents include cases of phishing attacks, network scanning and investigation, viruses and website hacking.
