A new cyber threat has emerged in Pakistan targeting ATM security known as the Ploutus malware. According to reports hackers can gain physical access to ATMs and force the machines to dispense cash without using a bank card or PIN. This malware does not steal money from customer accounts but directly compromises the ATM system.
1LINK Issues Advisory
Pakistan’s interbank switch network 1LINK has issued an advisory to all scheduled banks. The advisory warns financial institutions to strengthen ATM security immediately. The alert comes after a global rise in ATM jackpotting incidents that exploit similar malware.
How Ploutus Malware Works?
The Ploutus malware is installed directly onto an ATM operating system once a hacker gains physical access. After installation the attacker can command the ATM to dispense cash without requiring a card PIN or bank server approval. Ploutus targets the ATM itself not customer accounts making it a highly dangerous form of malware.
Multi Brand Vulnerability
Security experts warn that Ploutus is particularly risky because it can be adapted for different ATM brands with minimal modification. Machines with outdated software or weak physical security are most vulnerable. Banks are urged to improve protection at both hardware and software levels to prevent compromise.
Recommended Security Measures
The advisory recommends multiple steps for banks. Improve physical security with stronger locks CCTV and restricted access. Block USB and external ports enable hard drive encryption disable unauthorized remote tools monitor networks and maintain regular logs and audits of ATM activity.
Global Context of ATM Jackpotting
Experts note that attacks like Ploutus fall under ATM jackpotting a phenomenon reported globally and responsible for millions in losses. Pakistan’s current advisory serves as a precautionary measure to ensure banks secure systems and prevent potential financial loss.
Advice for Customers
Customers are advised to remain vigilant and report any suspicious ATM behavior. Keep PINs and cards secure and avoid using ATMs that appear tampered with. Awareness and caution are the best safety measures for the public.
