A covert ATM attack used a Raspberry Pi to breach bank systems, employing stealthy malware and anti-forensics techniques

  • wizardbeard@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    13
    ·
    11 days ago

    There are mitigations possible against allowing unrecognized MAC addresses from getting network connection when plugged into an open port.

    Security is meant to have layers. Defense in depth.

      • ramble81@lemmy.zip
        link
        fedilink
        English
        arrow-up
        3
        ·
        11 days ago

        I’ve seen ATMs using Windows 7 embedded. 802.1x support on 7 (let alone embedded) was extremely janky at best. Also it didn’t support some of the features that modern switches support too. That’s not an excuse for them but most likely their “defense in depth” was very limited and they just didn’t do quite a bit of it.