How can the user install software on a node authorizing payments? Once they do that, why can the Trojan read/write code? Very shoddy terminal security :( We

How can the user install software on a node authorizing payments? Once they do that, why can the Trojan read/write code? Very shoddy terminal security :( We can guess that the Bank of Banglesdesh uses not-locked-down Windows desktops to run their system.