The Phuket News Premier League predictions The Phuket News Kata Rocks The Phuket News Outrigger Koh Samui Beach Resort
The Phuket News Thailand News
The Phuket News Phuket | Thailand | World | Business | Q&A | Weird World XML, RSS, Feed
The Phuket News The Phuket News
The Phuket News

Manhunt for ATM robbers kicks off

BANGKOK: A manhunt is under way with police investigators suspecting the theft of more than B12 million from the state-run Government Savings Bank (GSB) is the work of Eastern European criminals and may be linked to the multiple attacks on ATMs of a major domestic bank in Taiwan in July.

crime, police,


Bangkok Post

Wednesday 24 August 2016, 08:39AM


An employees shuts down the network and posts paper 'out-of-service' notices after cyber-thieves armed with malware got ATMs to spew 12 million baht in cash like a casino jackpot. Photo: Bangkok Post / Wichan Charoenkiatpakul
An employees shuts down the network and posts paper 'out-of-service' notices after cyber-thieves armed with malware got ATMs to spew 12 million baht in cash like a casino jackpot. Photo: Bangkok Post / Wichan Charoenkiatpakul

After covering up the thefts for two weeks, GSB on Tuesday (Aug 23) shut down half of its ATMs after discovering some were infected with malware that forced them to dispense millions of baht in cash in what is the country’s first recorded case of its kind.

Assuring the thefts, which took place during Aug 1-8, have not affected customer accounts, GSB president Chartchai Payuhanaveechai said the gang targeted 21 ATMs in at least six provinces and made off with B12 million.

The six provinces are Phuket, Surat Thani, Chumphon, Prachuap Khiri Khan, Phetchaburi and Bangkok.

He said the bank has reviewed security camera footage and identified potential suspects as foreign nationals who infected the ATMs with malware that forced the machines to dispense banknotes.

“Their method involves stealing from the bank ATMs, not from customers’ accounts,” he said.

According to Mr Chartchai, the gang singled out ATMs manufactured by ATM giant manufacturer, NCR, for the attacks. So, the bank shut down about 3,300 “stand-alone” ATM machines from this maker indefinitely, until it has improved security measures to avoid further damage.

GSB has about 7,000 ATMs nationwide from three manufacturers.

However, another 600 NCR ATM machines in front of its bank branches are still functional, he said, adding that customers can use the ATMs of other commercial banks in the same area without having to pay intra-bank fees during the shutdown.

Mr Chartchai said the bank has asked the ATM maker to develop a software to counter the malware attacks and is negotiating with the firm to pay for the damages.

Pol Gen Panya Mamen, a senior police adviser, said these are the first reported malware attacks on ATMs in Thailand. Similar attacks have been reported in Malaysia and Taiwan where ATMs were cleaned out.

Based on security footage, he said police believe there are about 25 people involved in the series of thefts and they are divided into two to three teams.

He said the gang chose to empty the ATMs after midnight and spent some time stealing, so he urged members of the public who may have witnessed the thefts to come forward.

Mr Chartchai and other banking executives were quick to cite the July attacks on Taiwan ATMs, but “jackpotting” cash-dispensing machines is well known and has occurred around the world.

The technique of spotting vulnerable ATM networks, injecting malware and forcing the machines to spew out cash was demonstrated at a hackers’ conference in Las Vegas in 2010,and has been reported almost regularly since.

Barnaby Jack, a legendary US hacker and security expert, showed how certain ATMs on certain networks could be manipulated. Because the attackers needed no ATM card to drain the machine, he called the exploit jackpotting because it was like winning a jackpot at a slot machine in a casino.

British International School, Phuket

At least half a dozen types of malware and dozens of variants have been detected since then.

Pol Gen Panya said the thieves likely studied the infrastructure of the targeted ATMs and the bank’s system for some time. Police are closely monitoring ATMs that might be vulnerable.

He added the bank’s system is unable to detect such irregularities and the bank would not suspect anything until an actual count of cash.

The hard disks of the targeted ATMs have been sent by police for examination at McAfee.

He said the Metropolitan Police Bureau, the Central Investigation Bureau, the Economic and Cyber Crime Division, and Police Region 7 and Police Region 8 will meet on Friday to follow up on the investigation.

Pol Lt Gen Nathathorn Prousoontorn, chief of the Immigration Bureau, said the bureau has sent alerts about two possible suspects captured by security cameras to immigration checkpoints.

He said immigration authorities have also been sent to check out venues where eastern European nationals live, and they are coordinating with Russian authorities for assistance.

A source said the gang had hacked into the bank’s system several times and lured them into thinking it was a false alarm before they installed the malware at an ATM of GSB in Phang Nga during March-April.

According to the source, the tampering was detected but it was ignored due to prior false alarms.

To steal the money, the gang inserted an electronic card into the ATMs which forced them to release as many as 40 banknotes per withdrawal. Normally, the number of banknotes released in a withdrawal is capped at 20.

The source said the bank is working with the manufacturer of the targeted ATMs to figure out which malware was used. The theft could be linked to the one in Taiwan in July when malware programmes triggered withdrawals of almost B100 million.

According to the source, three suspects were arrested in connection with the thefts in Taiwan and they said there were 30 of them targeting ATMs across the country.

A source at the Royal Thai Police said Tuesday the GSB filed a complaint about the thefts with the Economic and Cyber Crime Division on Aug 9.

 

Read original story here.

 

 

The Phuket News
The Phuket News
Comment on this story
* Please login to comment. If you do not have an account please register below by simply entering a username, password and email address. You can still leave your comment below at the same time.
Comments Here:
Username:
Password:
E-mail:
Security:
    Forget your password?

Be the first to comment.

The Phuket News
The Phuket News The Phuket News The Phuket News
The Phuket News
Share this
The Phuket News
Have a news tip-off? Click here
The Phuket News
Related stories
The Phuket News
Phuket community

Recent Comments


Phuket’s Eva Beach appeal earns demolition reprieve, says Rawai Mayor

Could you help me and tell me what his face expression says about this person{the mayor}?!Is he a good or an evil person? Would a smiling face make h...(Read More)


Phuket’s Eva Beach appeal earns demolition reprieve, says Rawai Mayor

Face expressions of people say a lot about people. Look at the photo, and think. In Rawai and Naiharn is a lot going on. Installed traffic lights, ...(Read More)


Phuket’s Eva Beach appeal earns demolition reprieve, says Rawai Mayor

"... I have to wait for the Court of Appeal before issuing any orders to demolish any parts of the project, despite the initial court ruling...&q...(Read More)


Phuket’s Eva Beach appeal earns demolition reprieve, says Rawai Mayor

and "Rawai Garden" soi Suksan 2... how they can have a permit to build 158 rooms in this quite location with a very narrow access!... ...(Read More)


Phuket’s Eva Beach appeal earns demolition reprieve, says Rawai Mayor

Eva had 6 years in court to prove their innocence, which they did not. At great expense to the Thai taxpayer and waste of government resources. There ...(Read More)


Set Phuket croc ‘Leypang’ free, says poll

We may say that is croc Leypang is not the only croc in thai waters. Set it free in a habitat were he finds enough food, far from Phuket. Anyway he ...(Read More)


Cop in ‘great escape’ link

Oh, and don't forget, on 04 and 06 September General Prawit, the Defence Minister, told the thai press ( see PN articles on those days) that no po...(Read More)


Phuket’s Eva Beach appeal earns demolition reprieve, says Rawai Mayor

Just like Ao sane beach project. Why is the mayor and the Rawai Or Bor Tor planning department head not in jail. How many more building projects in Ra...(Read More)


Cop in ‘great escape’ link

It is funny to read in every newspaper the word 'Escape'. During the time of the travel of Ms Yingluck she was not under house arrest, there ...(Read More)


Phuket lifeguards to strike over budget cuts

Oh, the insanity of it all. At least there will be free wi-fi so when people drown we will see it up on Facebook just as it happens. I'm surpri...(Read More)

The Phuket News
Bangkok Hospital Phuket
PHUKET NEWS
Phuket
Thailand
World
Business
Q A
Weird World
ARCHIVE
POLL
CURRENCY
WEATHER
PHUKET TIDE TABLE
The Phuket News PHUKET LIFE
Phuket Arts
Phuket Community
Phuket Culture
Phuket Dining
Phuket Education
Phuket Entertainment
Phuket Environment
Phuket Health
Phuket People
Phuket Technology
Phuket Travel
World Entertainment
Photo Galleries
COLOURING BOOK
The Phuket News PHUKET SPORT
Phuket
Thailand
World
SURF REPORT
PREDICTIONS
The Phuket News PHUKET CLASSIFIEDS
Phuket Buy and Sell
Phuket Jobs
Phuket Property
Phuket Cars and Boats
Phuket Community
Phuket Services
SEARCH CLASSIFIEDS
POST CLASSIFIED
The Phuket News The Phuket News PHUKET EVENTS
Phuket Event listings
Phuket Event calendar
Buy Tickets
POST EVENT
The Phuket News PHUKET DIRECTORY
Phuket Bars, pubs and clubs
Phuket Hotels and villas
Phuket Restaurants
Phuket Yellow Pages
POST LISTING
The Phuket News BARGAINS
The Phuket News ABOUT US
The Company
Distribution points
Subscribe
Advertise with us
Pay for advert
Contact us
CONTESTS
Content Google Map
Site map
Australian Visa Services
 
Currency - The Phuket News   Weather Report - The Phuket News   Surf Report - The Phuket News
LinkedIn - The Phuket News   Twitter - The Phuket News   YouTube - The Phuket News   Facebook - The Phuket News
Copyright © 2017 Class Act Media. All rights reserved. | Website usage terms and conditions | Privacy and Confidentiality Statement.