This may be of interest to you. It talks about how this group pulled off the physical presence aspect too: https://www.bloomberg.com/news/articles/2018-03-26/

This may be of interest to you. It talks about how this group pulled off the physical presence aspect too: https://www.bloomberg.com/news/articles/2018-03-26/malware-mastermind-who-rigged-atms-to-spew-cash-caught-in-spain https://www.bloomberg.com/news/articles/2018-03-26/malware-m...