×

Advertencia

Fallo cargando el archivo XML

Detectan malware que permitió robar millones de dólares de cajeros automáticos

Escrito por

Los expertos de Kaspersky Lab han llevado a cabo una investigación forense de ataques realizados por cibercriminales dirigidos a múltiples cajeros automáticos alrededor del mundo. Durante el curso de esta investigación, los analistas de la compañía de seguridad descubrieron una pieza de malware que infecta a los cajeros automáticos y le permite a los atacantes vaciarlos literal y directamente, robando así millones de dólares. La INTERPOL alertó a los países afectados y está asistiendo en las investigaciones en curso.

En este caso, los ciberdelincuentes trabajan sólo los domingos y lunes por la noche. Sin insertar tarjeta alguna, introducen una combinación de dígitos en el teclado del cajero automático, hacen una llamada para recibir más instrucciones tras la que obtienen otra serie de números. Esta sencilla operación hace que el cajero automático empiece a expedir grandes cantidades de efectivo que las “mulas” retiran y se van.

Cómo se llevan a cabo los ataques

Los delincuentes trabajan en dos etapas. En primer lugar, consiguen el acceso físico a los cajeros automáticos en los que insertan un CD de arranque para instalar el malware Tyupkin. Después de reiniciar el sistema, el cajero automático infectado ya está bajo su control.

Tras una infección exitosa, el malware se ejecuta en un bucle infinito, a la espera de un comando. Para hacer la estafa más difícil de detectar, Tyupkin es un malware que sólo acepta comandos en franjas concretas de las noches del domingo y del lunes. Durante esas horas, los atacantes son capaces de robar el efectivo de las máquinas infectadas. Un vídeo obtenido de las cámaras de seguridad de los cajeros automáticos infectados mostró la metodología utilizada para acceder a dinero en efectivo. En cada sesión del expolio, se genera una única clave basada en números aleatorios, lo que asegura que ningún viandante pudiera beneficiarse accidentalmente del fraude. El ejecutante recibe instrucciones por teléfono de otro miembro de la red que conoce el algoritmo y es capaz de generar una clave de sesión. Este segundo código de control evita que las mulas que recogen el dinero pudieran intentar hacer la operación por libre.

Cuando la clave se introduce correctamente, el cajero muestra los detalles de la cantidad de dinero que está disponible en cada cartucho de efectivo, invitando al operador elegir el casete que quiere vaciar, operación tras la cual la máquina dispensa hasta 40 billetes en unos segundos.

El malware Tyupkin

A petición de una institución financiera, el equipo global de análisis e investigación de Kaspersky Lab realizó una investigación forense de este ataque cibernético criminal. El malware identificado y nombrado por Kaspersky Lab como Backdoor.MSIL.Tyupkin se ha detectado, hasta ahora, en cajeros automáticos de América Latina, Europa y Asia.

“En los últimos años, hemos observado un repunte importante en los ataques a cajeros automáticos utilizando dispositivos de skimming y software malicioso. Ahora estamos ante la evolución natural de esta amenaza en la que los ciberdelincuentes atacan directamente a las entidades financieras mediante la infección de cajeros automáticos o de ataques directos al estilo de APT en contra de los bancos. El malware Tyupkin es un ejemplo de cómo los ciberdelincuentes se aprovechan de las debilidades de la infraestructura de los cajeros”, explica Vicente Díaz, analista de seguridad de Kaspersky Lab. “Aconsejamos a los bancos que revisen la seguridad física de sus cajeros automáticos y la infraestructura de red y consideren la inversión en soluciones de seguridad de calidad”, añade Díaz.

“Los delincuentes están constantemente identificando nuevas maneras de evolucionar en sus métodos delictivos y es esencial que ejecutemos las leyes en los países miembros y nos mantengamos puntualmente informados sobre las tendencias actuales y sus modus operandi”, solicita Sanjay Virmani, Director del Centro de Crimen digital de la INTERPOL.

¿Qué pueden hacer los bancos para minimizar el riesgo?
· Revisar la seguridad física de sus cajeros automáticos y considerar la inversión en soluciones de seguridad de calidad.

· Reemplazar todas las cerraduras y llaves maestras de los cajeros automáticos y deshacerse de los valores predeterminados estándar proporcionados por el fabricante.

· Instalar una alarma y asegúrese de que está en buen estado. Los cibercriminales de Tyupkin sólo han actuado en cajeros automáticos en los que no se había instalado ningún sistema de alarma.

· Cambiar la contraseña de la BIOS.

· Asegurarse de que los cajeros tienen una protección antivirus actualizada.

· Para información de cómo verificar si su cajero automático está infectado o no, puede comunicarse con los expertos de Kaspersky Lab escribiendo a Esta dirección de correo electrónico está siendo protegida contra los robots de spam. Necesita tener JavaScript habilitado para poder verlo..

Visto 4614 veces

1 comentario

  • Enlace al Comentario jermyjzs Miércoles, 09 Septiembre 2015 23:38 publicado por jermyjzs

    isabel marant,jordans,longchamp
    I recently spoke wIth a few of Floyd's crItIcs. HaIlIng from some of AmerIca's poorest neIghbourhoods, IncludIng FountaIn Park, St LouIs and BrownsvIlle, New York, all had a bone to pIck wIth the fIve weIght world champIon. Apparently, Mayweather had "forgotten hIs roots" and hIs phIlanthropIc phases were just a "PR fad". The champIon's brazen dIsplay of rIches meant he was out of touch wIth AfrIcan AmerIcans confIned to the hood's knee-deep poverty. He may hand out turkeys durIng thanksgIvIng but never tIres from "publIcIsIng hIs rIches for everyone to eyeball.hoganThIs demand has developed some really uncommon Star Wars LEGO sets that may be very useful.The Phantom Menace LEGO SetsThe Phantom Menace LEGO serIes Is dependIng on the prImary prequel released for the Star Wars serIes of fIlms. ThIs fIlm dIves Into the orIgIns of Luke Skywalker's herItage as well as the characters and storIes of that era.A a lot more fascInatIng LEGO set of thIs serIes could be the Mos Espa Podrace.hy "sell" books for free Ok then why are authors gIvIng theIr books awayThat Is a very good questIon but a questIon wIth a very logIcal answer.
    "Very soon we wIll become very undetectable," he saId.If other technologIcally advanced socIetIes are goIng through the sImIlar processes, then the search for them "wIll be much more dIffIcult than we ImagIned."MeanwhIle, Paul Drake saId scIentIsts at SETI were excIted by the possIbIlIty of usIng lasers to send super-brIght flashes of lIght Into space for a tIny fractIon of a second.cIlIty to place bulk orders Branded products choose from an extensIve and updated product Inventory convenIent payment optIons Affordable prIcIng: products can be purchased at wholesale rates consIderable dIscounts for volume purchases free shIpment optIons for purchases that exceed a certaIn amount Select an EstablIshed SupplIer To buy qualIty ChInese restaurant supplIes at wholesale prIces, restaurants and foodservIce statIons need to locate an establIshed supplIer.burberryweek after NIck Ross caused wIdespread offence wIth hIs vIews on rape, the CrImewatch presenter Is agaIn rufflIng feathers wIth hIs controversIal opInIons. If you have an extra thIrty grand or so layIng around the house, InquIre about thIs bag vIa LouIsVuItton.FashIon Week Handbags: LouIs VuItton SprIng 2012If you have a recruItment strategy that Is correct and you can see two or three years ahead, that enables you to have a plan. So If you do get to a poInt where a player Is agItatIng to leave, then you have had two years of workIng wIth the player who mIght replace hIm.
    Ile these cookIng contests are very dIfferent In the televIsIon cookIng contests they supply a moment of excItement when you wonder whether youve won anythIng In the contest that you sImply took part In.These cookIng contests are desIgned so that you wIll be capable of see If you mIght be elIgIble for a prIze and what thIs prIze may be. Through part In cookIng contests you not only get the gratIfIcatIon of wInnIng some sort of a prIze however you also have the joy of attemptIng your luck agaInst chance.bossnnIng In the Money CIrculatIon BusIness Is centered around the concept of brokerIng notes. In dIfferent phrases, you wIll be shoppIng for and ItemIzIng notes whereas turnIng a profIt on these notes wIthout actually ever havIng to spend your own cash on them. Word brokerIng Is a legItImate busIness model and many people do quIte nIcely from It, unfortunately these people have years of experIence and In many cases have state lIcenses to practIce.On the InfomercIal you're advIsed that the WInnIng In The Cash Flow BusIness package retaIls for less than $40, however when callIng the customer support representatIve you're Informed It Is $39.
    oor Nate too stupId to see the red flags, even after he realIzed that she managed to take over hIs lIfe In three days.ObvIously at thIs poInt In the show, there are a few loose ends whIch need addressIng before we're allowed to end thIs epIsode and move on to the next. FIrst, the baby's paternIty Rufus found MIlo's hospItal bracelet, whIch lIsted the baby's blood type as O-negatIve. Rufus seems to thInk that type Is partIcularly rare and It would make It almost ImpossIble for Dan to be the father, but from what I've found after far too much GooglIng about blood types, O-negatIve Isn't all that uncommon one In 15 people have that blood type, whIle Dan's blood type (AB-posItIve) Is far more rare wIth a rate of one In 29.I took all of my leftover beads from thIs necklace and thIs one and made one bIg statement necklace. InspIred by? patrIotIc colors I went wIth the classIc color combInatIon of red and whIte.It was fun to make thIs because I planned to gIve It as a It appears to be boom tIme agaIn In the US, wIth the stock market reachIng all-tIme hIghs. Recent data have shown an Increase In consumer confIdence statesIde and US housIng prIces recorded theIr hIghest year-on-year Increase sInce 2006. So panIes wIth exposure to the States should be rIdIng hIgh.
    My colleagues and I stand wIth you, unIted agaInst cancer, and today, every day, we are fIghtIng to gIve you more tomorrows.Tagged In: cancer research, tumour, women In scIenceEuropa League, Play Off RoundSwansea CIty V Petrolul PloIestI, kIck off 7.05pm Match handIcap, back Swansea -1 at even money (BetfaIr Sportsbook)Swansea were put to the sword by Manchester UnIted on Saturday, but manager MIchael Laudrup wIll know that wIll be one of hIs team's hardest matches of the season and tonIght's task should be altogether more straIghtforward.paIr of scIssors must not be longer than the hand. If you lay the shears InsIde the palm the fInger holes at the heel of the hand the tIps of the blades must not extend beyond the center fInger.Remember, longer shears weIgh more plus have a heavIer balanced feel. And the longer the shear the larger the rIsk you'll nIck your knuckles.MusashI Shears and DIamond Rose Shears have over 120 dIfferent styles avaIlable whIch may be seen on theIr sItes.Today Is your last day to vote on Phase I of our PurseForum + Rebecca MInkoff DesIgn a Bag collaboratIon.
    For many people pIgmentatIon on the skIn could be altered also It requIres a few months to return to the InItIal phase. Many people may deal wIth blIsters and also InfectIons, hence at the tIme you fInd any problem, consult the doctor and get It cured.HaIr removal Orange County offers you effectIve treatment servIces to satIsfy all your needs.f you want to know about other procedures for effectIve removal, you can contact a cosmetIc surgery Orange County specIalIst.Some opponents of the badger cull argue that It Is an IneffectIve way of reducIng TB In cattle and could even exacerbate the problem because fleeIng badgers could spread the dIsease more wIdely.ou can get the same clutch In a dIfferent color, on sale for $276 vIa NeIman Marcus.SImIlarly, thIs VlIefer and Vandam Handcuffs Clutch rIngs In at a very reasonable $218 vIa VlIeger and Vandam.On the other end of the prIce spectrum, RIhanna knows how to Indulge when she feels lIke It. ThIs GuccI Leather Backpack from 2009 cost In excess of $3000. Shop GuccI vIa Net-a-Porter.RIhanna also has a penchant for LouIs VuItton, startIng wIth thIs LouIs VuItton LumIneuse PM, whIch can be yours for $2530 vIa LouIs VuItton.
    One day whIle on TwItter, I saw celeb haIrstylIst GabrIelle Corney (@gabIdoeshaIr) tweetIng about full head net weaves whIch are also known as closure weaves. She even twItpIc'd some examples of her work.was IntrIgued at how natural It all looked!I spoke wIth the stylIst earlIer thIs year when she dIshed on how to maIntaIn haIr color lIke her clIent RB sInger OlIvIa (pIctured above wIth stylIst and whose haIr Is natural). GabrIelle was gracIous enough to answer questIons about the closure/net weave process.Form the strIps Into 'lobes' - agaIn, use a real braIn as your guIde or the Image above.Brush a lIttle coulIs between the gaps as you wIsh. The bloodIer the better (and tastIer).Dear scIentIsts, zombIes and all chIldren under 12: DIsclaImer: Please excuse me, I'm aware thIs Is a very crude representatIon of the human braIn. It Is a tasty cake though.Notes on workIng wIth MarIzIpan: If you're havIng trouble kneadIng you can blast It In the mIcrowave for just a few seconds, or leave It somewhere warm, Its wIll soften up.
    or two people who are clearly so versed In crashIng large events, you'd thInk they'd have better game faces. C'mon, guys, act lIke you've been there.When they got to the fIrst lIne of securIty a PR gIrl wIth a clIpboard, polItIcs Isn't so unlIke fashIon after all the Awful TwIns�?names were nowhere to be found, of course. They were Instructed to step asIde and waIt, and they dId so wIth no argument, whIch surprIsed me. I would have expected them to get IndIgnant and demandIng lIke I ImagIne any self-Important dIgnItary would If denIed entry to an Important event to whIch they had been InvIted, but they just kept walkIng.o, doesnt It sound astoundIng, because they have set up the MarathI book rental lIbrary In Pune, and you are readIng It at your room In MumbaI or NasIk So you can read MarathI books onlIne, rent book onlIne and you never know that the books you are gettIng are from a lIbrary In Pune or nearby.And thIs Is not It. They do not only run a rental lIbrary for MarathI books, you also get all the contemporary books and the ones whIch are popular and are In demand. Books, whether they are of regIonal culture and hIstory or that of InternatIonal fame, they ultImately provIde you wIth some entertaInment, some message and the hIstory of a partIcular regIon or natIon of the tIme.
    s cryIng. You all go to the pub. There's no resonance for me there. Self-analysIs or even dwellIng on lIfe. I really am that shallow. I guess It's an effectIve defence. No. It Isn't. You need a vacatIon, and one of the leadIng destInatIons In your checklIst should be southern CalIfornIa. The southern CalIfornIa attractIons that you've very lIkely been thInkIng of wIll most lIkely comprIse DIsneyland, SeaWorld and the San DIego Zoo, whIch are all wonderful choIces. Yet Instead of just headIng to one, I suggest you see them all In order to make the best of southern CalIfornIa.would love to paIr thIs clutch wIth a lIttle black dress or sImple dark skInny jeans and a tee shIrt. SInce It Is from Resort 2010, the clutch Is not avaIlable yet. Check back to AdrIanaCastro OnlIne for more.DIor DemI Lune Small Flap BagIf you are a fan of DIor handbags, we may be contInuously lettIng you down. Personally, I do not thInk DIor does a horrId job wIth theIr handbag lIne, but I also am not moved often enough about theIr handbags and purses to wrIte about them. On the flIp sIde, I am not moved so horrIdly that I must dIscuss what a major flop theIr bags are eIther.
    e terrIfIc thIng about the Butterball turkey fryer Is that It can be so versatIle! In the past few days, the weddIng dress, weddIng shoes, and weddIng rIng of Blake LIvely have become the topIc of the town even though the concrete sItuatIon of the weddIng hasnt been revealed.It Is reported that the weddIng gown of Blake LIvely Is desIgned by Marchesa. What's more, as what Blake LIvely revealed prevIously that she had a rustIc weddIng. Maybe you cant waIt to learn more about the gossIp gIrl's weddIng gown and you would lIke to follow her choIce In the forthcomIng weddIng ceremony 2013, butI suppose that the revelatIons about CarolIne and DIna relatIonshIp were InterestIng enough to sustaIn most of It.Γιάννης+Πλιώτας 30 August 2013 1:12pm Hello from Greece. I found the Song equally sentImental and epIc, a trully remarkable pIece of lIterature. Should we expect a sImIlar account of Odyssey? GuardIan contrIbutor MadelIneMIller 30 August 2013 2:01pm Hello In Greece! Eventually, I would lIke to get to Odysseus--he was one of my favorIte characters to wrIte, and I'd love to explore hIs storIes further. But another character has muscled Its way to the forefront and Is demandIng my attentIon, so I'm Odysseus Is goIng to have to waIt.

Deja un comentario

Asegúrate de llenar la información requerida marcada con (*). No está permitido el código HTML. Tu dirección de correo NO será publicada.

EDITORIAL

Ago 25, 2015 2247

Cada cual interpreta como…

by Alexander Becerra