Cash on Command
Crews broke into ATMs across the U.S. and planted malware that made them spit out cash. Now the U.S. Treasury has sanctioned the network behind it.
Key terms
AP Cybersecurity alignment
- 2.2.B.5When adversaries gain physical access to a device and its ports, they can plug in a keylogger or external drive containing malware, which could allow them to collect data from a user or possibly even to gain control of the…Learning objective: Explain how threats can exploit common physical vulnerabilities to cause loss, damage, disruption, or destruction to assets.
- 2.4.A.1Cameras can capture a visual record of an adversary’s malicious activity. The feed from a camera should be recorded and monitored for maximum effect. Recordings can be especially helpful in after-incident investigations.Learning objective: Identify ways security controls can detect physical attacks.
- 4.1.A.4Embedded computers are devices that are part of a machine. Embedded devices have specific instruction sets for interfacing with the specialized components of the machine they’re embedded in. Embedded computers tend to be…Learning objective: Identify types of computing devices.
AP Networking alignment
- 4.5.A.2Direct access to network-connected devices, data theft, or equipment tampering may occur when an unauthorized individual gains physical access to secure areas. Tactics such as tailgating, piggybacking, or theft of laptops and…Learning objective: Identify the impacts of common threats and vulnerabilities in a managed network.
- 4.5.B.3Physical security controls to reduce the impact of direct access to network-connected devices include: • installing fencing, cameras, and on-site security to deter unauthorized access • using card readers and access control…Learning objective: Determine appropriate security controls to limit the impacts of common threats and vulnerabilities in a managed network.
- 4.6.B.2Monitoring and alerting tools help ensure availability by enabling rapid detection of failures or suspicious activity.Learning objective: Identify ways to improve the reliability and availability of networked systems.