Thai banks ‘prepared’ amid warning of global ATM attack

By ASINA PORNWASIN 
THE NATION 

 

 

COMMERCIAL banks in Thailand have boosted security to prevent unauthorised access to their automatic teller machines as cybercriminals are reportedly planning to carry out a large-scale global ATM attack.
 

According to The Star newspaper, the United States’ Federal Bureau of Investigation (FBI) has received an “unspecified report” that a global attack on ATMs could happen in coming days. 

 

Kitti Kosavisutte, chairman of the Thailand Banking-Computer Emergency Response Team (TB-CERT), said the attack warning was believed to have come from a cybersecurity event, but he noted that Thai banks are well-prepared at this stage.

 

He said Thai banks have recently tightened their control system to prevent unauthorised computer programs from entering the national ATM network, so it would be difficult to hack into the system. Based on The Star report, the attack is likely to compromise banks or card processors with malware, which would give the hackers access to the banks’ network and ATM card details, which will allow the hackers to freely withdraw cash. 

 

“The FBI has obtained unspecified reporting indicating cybercriminals are planning to conduct a global automated teller machine [ATM] cash-out scheme in the coming days, likely associated with an unknown card issuer breach and commonly referred to as an ‘unlimited operation’,” a blog post by veteran cybersecurity journalist Brian Krebs read. 

 

Krebs explained that in an “unlimited operation” attack, the hackers typically remove limits such as withdrawal amount and number of transactions. However, Kitti said the Thai ATM network’s control system has been tightened and updated to ensure a high level of security. He also pointed out that most ATM cards in Thailand have an embedded chip, so the risk is not that high. 

 

It was easier to skim ATM cards before because they had a magnetic strip, he pointed out. 

 

Many Thai banks have moved millions of customers to online and mobile platforms. For example, Kasikornbank now has about 9 million customers using its mobile apps. However, many customers still use ATMs for cash withdrawal and other transactions. 

 

According to The Star’s report, previous compromises have included small-to-medium size financial institutions, likely due to less robust implementation of cyber-security controls.

 

“The FBI expects the ubiquity of this activity to continue or possibly increase in the near future,” the alert said. “The cyber-criminals typically create fraudulent copies of legitimate cards by sending stolen card data to co-conspirators who imprint the data on reusable magnetic strip cards, such as gift cards purchased at retail stores.

 

“At a pre-determined time, the co-conspirators withdraw account funds from ATMs using these cards,” the FBI said.

 

Source: http://www.nationmultimedia.com/detail/business/30352326

 

-- © Copyright The Nation 2018-08-17

Yep, they are ready. They'll send you an SMS saying your account has been emptied.

46 minutes ago, theguyfromanotherforum said:

Yep, they are ready. They'll send you an SMS saying your account has been emptied.

Ha...I don’t need to have my account hacked for that to happen.

"...Thai banks ‘prepared’ amid warning of global ATM attack..."

 

I'd feel a lot better if the word 'prepared' didn't have the air quotes...

 

 

Trust the Thai banking authorities to alway be smug and  improvident about banking security saying we good, we have this and that in place, meanwhile, foreign gangs has been relentlessly robbing Thailand ATM for many millions of baht with some after being caught were sent home...

Don't you just love all the positive thinkers we are so fortunate to have in our midst.....how they manage to survive from day to day while seeing so much gloom and doom concerning everything Thai,.around them.....never ceases to amaze me.

They  have upgraded from Windows XP to Windows 7 ,cracked version .

 

regards worgerordie

I believe in " Thailand 4.0"

9 minutes ago, worgeordie said:

They  have upgraded from Windows XP to Windows 7 ,cracked version .

 

regards worgerordie

Not true! Windows Vista!

2 hours ago, Samui Bodoh said:

"...Thai banks ‘prepared’ amid warning of global ATM attack..."

 

I'd feel a lot better if the word 'prepared' didn't have the air quotes...

 

 

Yep, 1,2,3,4,5,6,7,8 code cracked, Happy day

Nobody can guarantee that hackers wont happen, as anything with PLC logic control can be hacked, it's as simple as that, where's there a will there's a way. 

1 hour ago, dotpoom said:

Don't you just love all the positive thinkers we are so fortunate to have in our midst.....how they manage to survive from day to day while seeing so much gloom and doom concerning everything Thai,.around them.....never ceases to amaze me.

It is, after all, Amazing Thailand!

4 hours ago, webfact said:

He also pointed out that most ATM cards in Thailand have an embedded chip, so the risk is not that high. 

Is this actually true? Mine doesn't for one.......

As always slow to respond and slow to report.

Attack already happened yesterday according to other reporting sources.

Missus just got up and noticed my ATM on top of my phone.  "Why you go ATM you still have money from last week?".  "Because I don't trust banks not to mess up, and if for example the ATM's were to stop working for a few days, the person with 1000 baht is suddenly a rich person".

 

She wandered off muttering something, so I opened email and in mere seconds saw the headlines in the ThaiVisa email.  "See?  might never happen, but what does it cost to put a little aside as insurance?".

 

She retired back to bed because the farang never has anything relevant to say.  Thankless life.  At least the dog came to greet me and show appreciation for my being there.  Or he wants to go and do, dog duties..... I think it's because he knows it's smart to go to the ATM ?

What newspaper are they taking about?  The Star?  Which Star? 

Hacking of institutions and individuals by criminal actors has and will continue to occur in the future as for every security initiative implemented Cyber criminals will find alternative access portals to implement fraudulent processes.

 

The real question to institutions should be, what’s your early detection processes, your recovery strategy to expedite the closure of the current exposure and your compensation plan timeline for the financial loss of victims funds.

 

With an open Internet connected society, S##T is always going to happen.

 

Best of luck convincing us all is good in the world of Thailand’s ATM security, that statement is just unsupportable.

"...Thai banks ‘prepared’..."

 

I hope so but it still sounds like an oxymoron to me.  

2 hours ago, dotpoom said:

Don't you just love all the positive thinkers we are so fortunate to have in our midst.....how they manage to survive from day to day while seeing so much gloom and doom concerning everything Thai,.around them.....never ceases to amaze me.

Agree, often wonder why do these negative minded people remain in Thailand??? Or, are they just taking the P***!!

wait until there truly is a cashless society...

I'm not sure that this hack has anything to do with skimming cards, like they are mentioning.

5 hours ago, webfact said:

Thai banks have recently tightened their control system

Judging by how long it takes to cash a cheque in my local K Bank + the number of hoops I have to jump through, I would say Thai banks are quite safe.

Invest in a few Amulets and you will be ok my bank book is firmly under a Buddha for extra security ?  

5 hours ago, webfact said:

Many Thai banks have moved millions of customers to online and mobile platforms. For example, Kasikornbank now has about 9 million customers using its mobile apps. However, many customers still use ATMs for cash withdrawal and other transactions. 

YEP.
I tried to get cash out of my smartphone, but doesn't work yet...

13 minutes ago, lvr181 said:

"...Thai banks ‘prepared’..."

 

I hope so but it still sounds like an oxymoron to me.  

I believe that Thai banks have the safest system worldwide ?

"...Thai banks ‘prepared’ amid warning of global ATM attack..."

 

 

It`s to Late this warning for Thailand started many years ago.............

Thai Lady`s 

 

 

Recently had to get  a new card  this one has a 6 digit pin and no visa . but works ok has got a chip , don't know if this helps 

 

You don't need a Titanic to sink your funds. Just come to Thailand....?

 

 

 

I only had to keep an eye on the missus before... now this !!

We were also told by those in charge, they are well 'prepared' to prevent floods...

2 hours ago, worgeordie said:

They  have upgraded from Windows XP to Windows 7 ,cracked version .

 

regards worgerordie

I was in K Bank on Tuesday and noted the Excel 2000 the staff were expected to use. Millions of baht spent on marketing but 20 year old software on the machines they use. 

An internationally highly qualified friend walked away from a major tech ugrade contract with another Thai bank last year, giving up as the level of software security was hopeless and they were insistent on dated inadequate proprietory Thai software being used for such. His words: you could hack most Thai banks with a philips screwdriver. I only keep as much in my Thai account as I can afford to lose.