"ATM Cash-Out: A Rising Threat Requiring Urgent Attention"

The PCI Security Standards Council (PCI SSC) and the ATM Industry Association (ATMIA) have started to warn financial institutions of ATM cash-out attacks.   Adversaries usually insert malware via phishing or social engineering methods into a financial institution or payment processor's systems to carry out an ATM cash-out attack.  An ATM cash-out attack is an attack where criminals breach a bank or payment card processor, manipulate fraud detection controls, and alter customer accounts so that there are no limits to withdraw money from numerous ATMs in a short period of time.  The adversaries often manipulate balances and withdrawal limits to allow ATM withdrawals until ATMs are empty of cash.

Help Net Security reports: "ATM Cash-Out: A Rising Threat Requiring Urgent Attention"