Security researchers from Sophos have discovered sophisticated malware that siphons payment card information out of automatic teller machines made by Diebold and possibly other manufacturers.
Sophos researcher Vanja Svajcer found three samples after combing through VirusTotal and a similar online database earlier this month. If installed, all three trojans contained functions that allowed them to log information recorded by an ATM's magnetic card reader. They also appeared to include routines for encrypting the stolen data and instructions for retrieving the captured passwords using the ATM's printing capabilities. That would allow mules outfitted with the proper codes to fetch the pilfered information from the targeted machines, Svajcer told The Register.
Diebold became aware of the trojans in January, after an incident "isolated in Russia" attempted to use the malware to intercept sensitive information, according to an advisory the company sent its customers. Suspects in the incident have been apprehended, and Diebold is working with authorities "to assist with the investigation into these recent crimes," the advisory added.