Cashing in on ATM Malware: A Comprehensive Look at Various Attack Types

Executive summary: This joint Trend Micro–Europol report reviews the evolution, techniques and impact of ATM malware and related network attacks worldwide, detailing malware families (Skimer, Ploutus, Padpin/Tyupkin, Ripper, Alice, ATMMitch, NeoPocket, Suceful), documented campaigns and intrusion methods (physical USB/CD installation and growing network-based infection via phishing, lateral movement and compromised update servers), provides technical analysis of XFS/middleware abuse and ATM internals, and discusses criminal actors, business models and mitigation recommendations.