Classifieds 50% off, use promo code FBkpkPromo The Phuket News Kata Rocks The Phuket News Outrigger Koh Samui Beach Resort
The Phuket News Thailand News
The Phuket News Phuket | Thailand | World | Business | Q&A | Weird World XML, RSS, Feed
The Phuket News The Phuket News
The Phuket News

Manhunt for ATM robbers kicks off

BANGKOK: A manhunt is under way with police investigators suspecting the theft of more than B12 million from the state-run Government Savings Bank (GSB) is the work of Eastern European criminals and may be linked to the multiple attacks on ATMs of a major domestic bank in Taiwan in July.

crime, police,


Bangkok Post

Wednesday 24 August 2016, 08:39AM


An employees shuts down the network and posts paper 'out-of-service' notices after cyber-thieves armed with malware got ATMs to spew 12 million baht in cash like a casino jackpot. Photo: Bangkok Post / Wichan Charoenkiatpakul
An employees shuts down the network and posts paper 'out-of-service' notices after cyber-thieves armed with malware got ATMs to spew 12 million baht in cash like a casino jackpot. Photo: Bangkok Post / Wichan Charoenkiatpakul

After covering up the thefts for two weeks, GSB on Tuesday (Aug 23) shut down half of its ATMs after discovering some were infected with malware that forced them to dispense millions of baht in cash in what is the country’s first recorded case of its kind.

Assuring the thefts, which took place during Aug 1-8, have not affected customer accounts, GSB president Chartchai Payuhanaveechai said the gang targeted 21 ATMs in at least six provinces and made off with B12 million.

The six provinces are Phuket, Surat Thani, Chumphon, Prachuap Khiri Khan, Phetchaburi and Bangkok.

He said the bank has reviewed security camera footage and identified potential suspects as foreign nationals who infected the ATMs with malware that forced the machines to dispense banknotes.

“Their method involves stealing from the bank ATMs, not from customers’ accounts,” he said.

According to Mr Chartchai, the gang singled out ATMs manufactured by ATM giant manufacturer, NCR, for the attacks. So, the bank shut down about 3,300 “stand-alone” ATM machines from this maker indefinitely, until it has improved security measures to avoid further damage.

GSB has about 7,000 ATMs nationwide from three manufacturers.

However, another 600 NCR ATM machines in front of its bank branches are still functional, he said, adding that customers can use the ATMs of other commercial banks in the same area without having to pay intra-bank fees during the shutdown.

Mr Chartchai said the bank has asked the ATM maker to develop a software to counter the malware attacks and is negotiating with the firm to pay for the damages.

Pol Gen Panya Mamen, a senior police adviser, said these are the first reported malware attacks on ATMs in Thailand. Similar attacks have been reported in Malaysia and Taiwan where ATMs were cleaned out.

Based on security footage, he said police believe there are about 25 people involved in the series of thefts and they are divided into two to three teams.

He said the gang chose to empty the ATMs after midnight and spent some time stealing, so he urged members of the public who may have witnessed the thefts to come forward.

Mr Chartchai and other banking executives were quick to cite the July attacks on Taiwan ATMs, but “jackpotting” cash-dispensing machines is well known and has occurred around the world.

The technique of spotting vulnerable ATM networks, injecting malware and forcing the machines to spew out cash was demonstrated at a hackers’ conference in Las Vegas in 2010,and has been reported almost regularly since.

Barnaby Jack, a legendary US hacker and security expert, showed how certain ATMs on certain networks could be manipulated. Because the attackers needed no ATM card to drain the machine, he called the exploit jackpotting because it was like winning a jackpot at a slot machine in a casino.

C and C Marine

At least half a dozen types of malware and dozens of variants have been detected since then.

Pol Gen Panya said the thieves likely studied the infrastructure of the targeted ATMs and the bank’s system for some time. Police are closely monitoring ATMs that might be vulnerable.

He added the bank’s system is unable to detect such irregularities and the bank would not suspect anything until an actual count of cash.

The hard disks of the targeted ATMs have been sent by police for examination at McAfee.

He said the Metropolitan Police Bureau, the Central Investigation Bureau, the Economic and Cyber Crime Division, and Police Region 7 and Police Region 8 will meet on Friday to follow up on the investigation.

Pol Lt Gen Nathathorn Prousoontorn, chief of the Immigration Bureau, said the bureau has sent alerts about two possible suspects captured by security cameras to immigration checkpoints.

He said immigration authorities have also been sent to check out venues where eastern European nationals live, and they are coordinating with Russian authorities for assistance.

A source said the gang had hacked into the bank’s system several times and lured them into thinking it was a false alarm before they installed the malware at an ATM of GSB in Phang Nga during March-April.

According to the source, the tampering was detected but it was ignored due to prior false alarms.

To steal the money, the gang inserted an electronic card into the ATMs which forced them to release as many as 40 banknotes per withdrawal. Normally, the number of banknotes released in a withdrawal is capped at 20.

The source said the bank is working with the manufacturer of the targeted ATMs to figure out which malware was used. The theft could be linked to the one in Taiwan in July when malware programmes triggered withdrawals of almost B100 million.

According to the source, three suspects were arrested in connection with the thefts in Taiwan and they said there were 30 of them targeting ATMs across the country.

A source at the Royal Thai Police said Tuesday the GSB filed a complaint about the thefts with the Economic and Cyber Crime Division on Aug 9.

 

Read original story here.

 

 

The Phuket News
The Phuket News
Comment on this story
* Please login to comment. If you do not have an account please register below by simply entering a username, password and email address. You can still leave your comment below at the same time.
Comments Here:
Username:
Password:
E-mail:
Security:
    Forget your password?

Be the first to comment.

The Phuket News
The Phuket News The Phuket News The Phuket News
The Phuket News
Share this
The Phuket News
Have a news tip-off? Click here
The Phuket News
Related stories
The Phuket News
Phuket community

Recent Comments


Phuket drunk rescued after falling in ditch while taking a pee

Probably back driving buses over Patong Hill!...(Read More)


Phuket under pressure as tourism growth exposes flaws in hotel sector

Rorri_2 ... none of your business. When you figure out what neo colonialist means and that can be located within context, get back to me....(Read More)


German Papke reveals details of Phuket murder

Bigaresort...it's because it is murder ie when you kill someone unlawfully and with premeditation. It's more of a definition that is easily un...(Read More)


Phuket power chiefs told to speed up cable tangle clean-up

There is only one real and fast solution,cut them all and make new ones for those who complain! SIMPLE!!There will be only a few! Horst...(Read More)


German Papke reveals details of Phuket murder

Why is the polis always say murder when it comes to foreigner's?Just Killing would be enough!Could be manslaughter,Let the judge decide ! Horst...(Read More)


Phuket’s dangerous driving habits sees underpass traffic-flow barrier installed

No wonder As long there egoistic reckless traffic rules ignoring motorists on the road There will be chaos and traffic jams. ...(Read More)


German Papke reveals details of Phuket murder

Can't imagine how somebody could live a normal live day to day knowing what you'd done weeks, months, years before...(Read More)


Phuket under pressure as tourism growth exposes flaws in hotel sector

Jor12, you wouldn't, by chance, run hotels rooms. By the way, you continually use the term "neo colonialist" incorrectly. ...(Read More)


Phuket’s dangerous driving habits sees underpass traffic-flow barrier installed

Because getting the police out to fine dangerous drivers is too difficult...(Read More)


Aussie lifeguards ramp up Phuket lifesaving skills, awareness

Well done that guy, they should put him in charge of many posts, he realises that getting help from other countries is the way forward!...(Read More)

The Phuket News
Bangkok Hospital Phuket
PHUKET NEWS
Phuket
Thailand
World
Business
Q A
Weird World
ARCHIVE
POLL
CURRENCY
WEATHER
PHUKET TIDE TABLE
The Phuket News PHUKET LIFE
Phuket Arts
Phuket Community
Phuket Culture
Phuket Dining
Phuket Education
Phuket Entertainment
Phuket Environment
Phuket Health
Phuket People
Phuket Technology
Phuket Travel
Photo Galleries
COLOURING BOOK
The Phuket News PHUKET SPORT
Phuket
Thailand
World
SURF REPORT
PREDICTIONS
The Phuket News PHUKET CLASSIFIEDS
Phuket Buy and Sell
Phuket Jobs
Phuket Property
Phuket Cars and Boats
Phuket Community
Phuket Services
SEARCH CLASSIFIEDS
POST CLASSIFIED
The Phuket News The Phuket News PHUKET EVENTS
Phuket Event listings
Phuket Event calendar
Buy Tickets
POST EVENT
The Phuket News PHUKET DIRECTORY
Phuket Bars, pubs and clubs
Phuket Hotels and villas
Phuket Restaurants
Phuket Yellow Pages
POST LISTING
The Phuket News BARGAINS
The Phuket News ABOUT US
The Company
Distribution points
Subscribe
Advertise with us
Pay for advert
Contact us
CONTESTS
Content Google Map
Site map
Australian Visa Services
 
Currency - The Phuket News   Weather Report - The Phuket News   Surf Report - The Phuket News
LinkedIn - The Phuket News   Twitter - The Phuket News   YouTube - The Phuket News   Facebook - The Phuket News
Copyright © 2017 Class Act Media. All rights reserved. | Website usage terms and conditions | Privacy and Confidentiality Statement.