4 ms·
I wish we could learn more about that. The article said it was Russian IPs and tools, but that doesn't account for the local ATM activity. It also seems like y
by darkstar999 8y ago
I wish we could learn more about that. The article said it was Russian IPs and tools, but that doesn't account for the local ATM activity.
It also seems like you'd need a lot of domain knowledge to make this happen. If you gave me an open machine in a bank I'd have no idea what to do.
- zokier 8y agoThe article does touch on the matter: > The bank’s complaint against Everest notes that the financial institution doesn’t yet know for sure how the thieves involved in the 2017 breach extracted funds. In previous such schemes (known as “unlimited cashouts“), the fraudsters orchestrating the intrusion recruit armies of “money mules” — usually street criminals who are given cloned debit cards and stolen or fabricated PINs along with instructions on where and when to withdraw funds.