Hacking Next-Gen ATMs: From Capture to Cashout

on YouTube ↗33m

" summary

Demonstrates a working attack chain that buys harvested card sessions from a fraud backend, relays EMV/NFC traffic to a remote card emulator and automates PIN entry with servos; a $2,000 kit (phone, Arduino/Raspberry Pi, servos) plus shimmers and custom backend La-Cara automated fascia silently withdraws $20,000–$50,000 in 15 minutes during the demo, and a radar-based PIN capture using iron oxide and ATM foreign‑object sensors proves feasible; claimed NFC relay range reaches 400 miles.

AI-written summary · about

" chapters (5)

1. 0:00Start
2. 4:01What is EMV?
3. 22:05Building your Own Banking Backend
4. 26:07New Automating PIN Capture
5. 27:38Probing Networks and Card Settings

" related talks

• 45mATMS how to break them to stop the fraudOlga Kochetova, Alexey Osipov · CODE BLUE 2016
• 42mHack Your ATM with Friend's Raspberry.PyOlga Kochetova, Alexey Osipov · Black Hat Europe 2014
• 59mHow Smartcard Payment Systems FailRoss Anderson · Black Hat USA 2014
• 23mPoint of Sale System Architecture and SecurityLucas Zaichkowsky · Black Hat USA 2014
• 24mPicking Up My Tab...Zhe Zhou, XiaoFeng Wang, Kehuan Zhang, Xiaolong Bai, Nan Zhang, Zhou Li, Shi-Min Hu, Xianghang Mi, Tongxin Li · 26th USENIX Security Symposium (USENIX Security '17)
• 40mWhen hardware attacks scaleMarc Witteman · hardwear.io Netherlands 2019
• 01h 03mHack To Discover Weaknesses In A Series Of SmartcardsChristopher Tarnovsky · hardwear.io USA 2019
• 58mHow I used to rob banks!Freaky Clown · Devoxx Belgium 2019