Combatting criminal innovation with ATM software security

The biggest evergreen issue in the ATM industry is of course security. Criminals are always ready with innovative methods to steal cash from ATMs faster than the industry can put up protective barriers.

This is true of both the ATM hardware and software. In today's episode of the Bank Customer Experience podcast, Bradley Cooper spoke with Kit Patterson, a senior software architecture and security expert at KAL ATM Software to get an overhead view of current theft trends and ways to combat them.

One new method that Patterson discussed was the relay attack. In this attack, one device is compromised is relays card data to another machine, which can be used to steal money from a victim.

"The basic story is they use two machines. They attack two machines in parallel. They wait until a victim puts a card into that victim ATM or ticket machine or anything where a card is being used. They take over that card and they relay information from that card to the cash out machine."

He said that while this attack is difficult to pull off, it can also be challenging to detect and would require monitoring for certain types of unusual activity. For example, the software could detect that the card reader itself would take longer to transmit data in a relay attack than in a normal transaction, which should put up a red flag.

Patterson also said that this relay attack is also taking place with mobile wallet fraud, where attackers are able to steal the victim's mobile wallet and relay that information to another actor who will get the cash from an ATM.

He emphasized that criminals are willing to use as many methods as possible as "they don't follow the rules."

To respond to these threats, Patterson pointed to the importance of holistic efforts and not just viewing security as "ticking boxes."

Check out the full interview above and hear Patteron's thoughts on if AI is ready to transform ATM security.