Interesting People mailing list archives
Nachi worm infected Diebold ATMs
From: Dave Farber <dave () farber net>
Date: Tue, 25 Nov 2003 08:24:55 -0500
Delivered-To: dfarber+ () ux13 sp cs cmu edu Date: Mon, 24 Nov 2003 15:26:48 -0800 From: "Kevin L. Poulsen" <klp () securityfocus com> Subject: Nachi worm infected Diebold ATMs To: 'Dave Farber' <farber () cis upenn edu> Nachi worm infected Diebold ATMs By Kevin Poulsen, SecurityFocus The Nachi worm compromised Windows-based automated teller machines at two financial institutions last August, according to ATM-maker Diebold, in the first confirmed case of malicious code penetrating cash machines. The machines were in an advanced line of Diebold ATMs built atop Windows XP Embedded, which, like most versions of Windows, was vulnerable to the RPC DCOM security bug exploited by Nachi, and its more famous forebear, Blaster. At both affected institutions the ATMs began aggressively scanning for other vulnerable machines, generating anomalous waves of network traffic that tripped the banks' intrusion detection systems, resulting in the infected machines being automatically cut off, Diebold executives said. http://www.securityfocus.com/news/7517
------------------------------------- You are subscribed as interesting-people () lists elistx com To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/
Current thread:
- Nachi worm infected Diebold ATMs Dave Farber (Nov 25)