April 19, 2021
In India, all banks have been instructed to step up safety protocols for ATM machines through end-to-end encryption in their LAN network due to a new theft scheme known as Man in the Middle or MiTM. The communication comes from the country's government, as well as the Reserve Bank of India, according to a report in The Tribune.
In a MiTM attack, fraudsters locate the LAN network cable for the ATM and alter messages sent through the ATM system by 'ATM Switch' to 'ATM Host.' Once the messages have been altered, the thieves can withdraw cash.
Bank officials were warned to physically conceal, secure and protect the bank's network cables, especially the input/output port for the ATM, and encrypt all communication between an ATM terminal or PC and the ATM switch to avoid further theft of cash.