Click to download Tribute to His Majesty PDF

The Phuket News Kata Rocks The Phuket News Outrigger Koh Samui Beach Resort
The Phuket News Thailand News
The Phuket News Phuket | Thailand | World | Business | Q&A | Weird World XML, RSS, Feed
The Phuket News The Phuket News
The Phuket News

Manhunt for ATM robbers kicks off

BANGKOK: A manhunt is under way with police investigators suspecting the theft of more than B12 million from the state-run Government Savings Bank (GSB) is the work of Eastern European criminals and may be linked to the multiple attacks on ATMs of a major domestic bank in Taiwan in July.

crime, police,


Bangkok Post

Wednesday 24 August 2016, 08:39AM


An employees shuts down the network and posts paper 'out-of-service' notices after cyber-thieves armed with malware got ATMs to spew 12 million baht in cash like a casino jackpot. Photo: Bangkok Post / Wichan Charoenkiatpakul
An employees shuts down the network and posts paper 'out-of-service' notices after cyber-thieves armed with malware got ATMs to spew 12 million baht in cash like a casino jackpot. Photo: Bangkok Post / Wichan Charoenkiatpakul

After covering up the thefts for two weeks, GSB on Tuesday (Aug 23) shut down half of its ATMs after discovering some were infected with malware that forced them to dispense millions of baht in cash in what is the country’s first recorded case of its kind.

Assuring the thefts, which took place during Aug 1-8, have not affected customer accounts, GSB president Chartchai Payuhanaveechai said the gang targeted 21 ATMs in at least six provinces and made off with B12 million.

The six provinces are Phuket, Surat Thani, Chumphon, Prachuap Khiri Khan, Phetchaburi and Bangkok.

He said the bank has reviewed security camera footage and identified potential suspects as foreign nationals who infected the ATMs with malware that forced the machines to dispense banknotes.

“Their method involves stealing from the bank ATMs, not from customers’ accounts,” he said.

According to Mr Chartchai, the gang singled out ATMs manufactured by ATM giant manufacturer, NCR, for the attacks. So, the bank shut down about 3,300 “stand-alone” ATM machines from this maker indefinitely, until it has improved security measures to avoid further damage.

GSB has about 7,000 ATMs nationwide from three manufacturers.

However, another 600 NCR ATM machines in front of its bank branches are still functional, he said, adding that customers can use the ATMs of other commercial banks in the same area without having to pay intra-bank fees during the shutdown.

Mr Chartchai said the bank has asked the ATM maker to develop a software to counter the malware attacks and is negotiating with the firm to pay for the damages.

Pol Gen Panya Mamen, a senior police adviser, said these are the first reported malware attacks on ATMs in Thailand. Similar attacks have been reported in Malaysia and Taiwan where ATMs were cleaned out.

Based on security footage, he said police believe there are about 25 people involved in the series of thefts and they are divided into two to three teams.

He said the gang chose to empty the ATMs after midnight and spent some time stealing, so he urged members of the public who may have witnessed the thefts to come forward.

Mr Chartchai and other banking executives were quick to cite the July attacks on Taiwan ATMs, but “jackpotting” cash-dispensing machines is well known and has occurred around the world.

The technique of spotting vulnerable ATM networks, injecting malware and forcing the machines to spew out cash was demonstrated at a hackers’ conference in Las Vegas in 2010,and has been reported almost regularly since.

Barnaby Jack, a legendary US hacker and security expert, showed how certain ATMs on certain networks could be manipulated. Because the attackers needed no ATM card to drain the machine, he called the exploit jackpotting because it was like winning a jackpot at a slot machine in a casino.

C and C Marine

At least half a dozen types of malware and dozens of variants have been detected since then.

Pol Gen Panya said the thieves likely studied the infrastructure of the targeted ATMs and the bank’s system for some time. Police are closely monitoring ATMs that might be vulnerable.

He added the bank’s system is unable to detect such irregularities and the bank would not suspect anything until an actual count of cash.

The hard disks of the targeted ATMs have been sent by police for examination at McAfee.

He said the Metropolitan Police Bureau, the Central Investigation Bureau, the Economic and Cyber Crime Division, and Police Region 7 and Police Region 8 will meet on Friday to follow up on the investigation.

Pol Lt Gen Nathathorn Prousoontorn, chief of the Immigration Bureau, said the bureau has sent alerts about two possible suspects captured by security cameras to immigration checkpoints.

He said immigration authorities have also been sent to check out venues where eastern European nationals live, and they are coordinating with Russian authorities for assistance.

A source said the gang had hacked into the bank’s system several times and lured them into thinking it was a false alarm before they installed the malware at an ATM of GSB in Phang Nga during March-April.

According to the source, the tampering was detected but it was ignored due to prior false alarms.

To steal the money, the gang inserted an electronic card into the ATMs which forced them to release as many as 40 banknotes per withdrawal. Normally, the number of banknotes released in a withdrawal is capped at 20.

The source said the bank is working with the manufacturer of the targeted ATMs to figure out which malware was used. The theft could be linked to the one in Taiwan in July when malware programmes triggered withdrawals of almost B100 million.

According to the source, three suspects were arrested in connection with the thefts in Taiwan and they said there were 30 of them targeting ATMs across the country.

A source at the Royal Thai Police said Tuesday the GSB filed a complaint about the thefts with the Economic and Cyber Crime Division on Aug 9.

 

Read original story here.

 

 

The Phuket News
The Phuket News
Comment on this story
* Please login to comment. If you do not have an account please register below by simply entering a username, password and email address. You can still leave your comment below at the same time.
Comments Here:
Username:
Password:
E-mail:
CAPTCHA
    Forget your password?

Be the first to comment.

The Phuket News
The Phuket News The Phuket News The Phuket News
The Phuket News
Share this
The Phuket News
Have a news tip-off? Click here
The Phuket News
Related stories
The Phuket News
Phuket community

Recent Comments



New Phuket underpass to add more delays to reaching airport

Phuket Airport is a mess for coming and going traffic, due to renovation. Now another nearby location becoming traffic wise a disaster for 3 years. ...(Read More)


Army hunts down Phuket taxi driver for refusing airport tourist passenger

Maybe I have been lucky but I have used taxis from Phuket airport to Cherng Talay many times and never had a problem - always on the meter, courteous ...(Read More)


No charges over Aussie tourist injured in Patong parasail plunge

I agree with Gat, it is impossible to fall out of the harness, there is a great big nylon strap under your crotch. No poor vendors selling drinks and...(Read More)


Phuket police mount horses for tourists’ safety

Officers will receive training so they can safely ride and control the horses while patrolling the beach..." "... we will increase our moun...(Read More)


Patong Mayor unveils plans for Loma food centre as vendors agree delayed eviction

What that is typical Thai will eventually remain on Phuket? What will go next? the Markets? why not upgrade the Food Court then? Take away all the Tha...(Read More)


Dhammajayo ‘won’t get bail’

Yep ...agree. The article is clear enough. Couldn't be bothered trying to fathom out Kurt's "comment/s" and the point he was making....(Read More)


Dhammajayo ‘won’t get bail’

@ Swerv: To answer your 2 questions,.. Deviating, from ..to deviate.. It also means ..swerving.. :-) Right? About the DSI remark, I guess you ...(Read More)


No charges over Aussie tourist injured in Patong parasail plunge

Really? Is beach parasailing a illegal business? How is that possible? Thailand has many good laws. And: The law is the law, right? Perhaps law enf...(Read More)


New Phuket underpass to add more delays to reaching airport

Totally unnecessary, I drive through this intersection daily and there was absolutely nothing wrong with it the way it was, traffic flowed smoothly, n...(Read More)

The Phuket News
Bangkok Hospital Phuket
PHUKET NEWS
Phuket
Thailand
World
Business
Q A
Weird World
ARCHIVE
POLL
CURRENCY
WEATHER
PHUKET TIDE TABLE
The Phuket News PHUKET LIFE
Phuket Arts
Phuket Community
Phuket Culture
Phuket Dining
Phuket Education
Phuket Entertainment
Phuket Environment
Phuket Health
Phuket People
Phuket Technology
Phuket Travel
Photo Galleries
COLOURING BOOK
The Phuket News PHUKET SPORT
Phuket
Thailand
World
SURF REPORT
PREDICTIONS
The Phuket News PHUKET CLASSIFIEDS
Phuket Buy and Sell
Phuket Jobs
Phuket Property
Phuket Cars and Boats
Phuket Community
Phuket Services
SEARCH CLASSIFIEDS
POST CLASSIFIED
The Phuket News The Phuket News PHUKET EVENTS
Phuket Event listings
Phuket Event calendar
Buy Tickets
POST EVENT
The Phuket News PHUKET DIRECTORY
Phuket Bars, pubs and clubs
Phuket Hotels and villas
Phuket Restaurants
Phuket Yellow Pages
POST LISTING
The Phuket News BARGAINS
The Phuket News ABOUT US
The Company
Distribution points
Subscribe
Advertise with us
Pay for advert
Contact us
CONTESTS
Content Google Map
Site map
Australian Visa Services
 
Currency - The Phuket News   Weather Report - The Phuket News   Surf Report - The Phuket News
LinkedIn - The Phuket News   Twitter - The Phuket News   YouTube - The Phuket News   Facebook - The Phuket News
Copyright © 2016 Class Act Media. All rights reserved. | Website usage terms and conditions | Privacy and Confidentiality Statement.