ATMIA Helps ATM Industry on Malware Attacks Prevention

To help the ATM industry prevent malware attacks on its terminals, the ATM Industry Association has published new guidelines called “Best Practices for Preventing ATM Malware, Black Box and Cyber-Attacks”.

This important security manual explains how ATM malware works, from installation to execution, as well as how to detect it.

It includes major international ATM malware case studies, for example, Skimer-A, Scrooge, Siberian Malware, Dump Memory Grabber, Backdoor Ploutus, Macau Malware and others.

The manual also looks into Black Box Attacks and the hijacking of ATM Control and Authorization Systems before outlining key mitigation best practices.

The guidelines, as published by E-PPAN on Friday, share useful links, background reading and relevant standards documentation and provide a handy Executive Summary.

“In October 2014, the ATM Software Security Committee released Version 3 of the ATM Software Security Best Practices Guide,” explained Mike Lee, CEO.

Lee added that, “This work provided in-depth analysis of software architectures, standards compliance, risks and mitigation factors relevant to ATM software and systems. But we decided to provide a shorter, stand-alone manual for our members to help prevent the most serious and urgent cyber threats. We can radically combat cyber fraud if we stand together and implement all the guidelines across every market.”

He thanked Technical Editor, Douglas Russell, of DFR Risk Management Ltd., Juan Jesus Leon Cobos, of GMV, Irmantas Brazaitis of Smart Card Security Ltd., as well as all the contributors to Version 3 of the Software Security Best Practices guide from which the new stand-alone document evolved.