News

Indian ATMs targeted by Chinese malware 'Rufus'

June 20, 2017

Authorities in India have reported that criminals are using a Chinese malware program called Rufus to jackpot ATMs.

According to an article in Business Today, the malware has shown up at ATMs in the states of Odisha, West Bengal, Bihar and Gujarat.

The publication cited sources who said that criminals were targeting ATMs still running on he Microsoft Windows XP operating system.

Microsoft no longer supports that OS, meaning that vulnerabilities in the system are no longer being patched by the software-maker. During the WannaCry ransomware attack last month, the Reserve Bank of India advised commercial banks to update their systems without delay.

According to police in Odisha, criminals have been gaining access to the ATMs using a key. They then download the malware to the ATM from a USB drive and reboot the system without linking to the host. The malware generates a password that thieves enter at the ATM, directing it to dispense all of its cash.

Prashant Mali, described as a cyberlawyer based in Mumbai, placed blame for the intrusions on ATM manufacturers.

"The government and RBI should make ATM manufacturers compulsorily install new and robust operating systems," he said.