Skip to content
View in the app

A better way to browse. Learn more.

Thailand News and Discussion Forum | ASEANNOW

A full-screen app on your home screen with push notifications, badges and more.

To install this app on iOS and iPadOS
  1. Tap the Share icon in Safari
  2. Scroll the menu and tap Add to Home Screen.
  3. Tap Add in the top-right corner.
To install this app on Android
  1. Tap the 3-dot menu (⋮) in the top-right corner of the browser.
  2. Tap Add to Home screen or Install app.
  3. Confirm by tapping Install.

Hackers steal 12.29 million baht from GSB’s ATMs

Featured Replies

Hackers steal 12.29 million baht from GSB’s ATMs

 

GSB-wpcf_728x413.jpg

 

BANGKOK: -- The thefts have forced the GSB to suspend indefinitely the services of about 4,000 NCR-branded ATMs which were manufactured by a Scottish company.

 

GSB director Mr Chartchai Payuhanaveechai said Tuesday that the bank had suspended the services of the Scottish-made ATMs on August 8 after officials found out that 21 of the ATMs had been hacked with the use of Malware programme.

 

The hackers withdrew 40,000 baht each time from six NCR ATMs in Phuket, two each in Surat Thani, Chumporn, Prachuab Khiri Khan and Petchaburi and five in Bangkok in Sukhumvit and Vibhavadi Rangsit areas.

 

Mr Chartchai said the bank had notified the Bank of Thailand about the electronic thefts so that commercial banks which have in their services similar brand of ATMs be warned and taken appropriate preventive measures.

 

There are about 10,000 NCR ATMs in service in Thailand, including about 4,000 of the GSB.

 

He said that the stolen money belong to the bank, not the customers, so GSB would demand compensation from the manufacturer of the machines.

 

Source: http://englishnews.thaipbs.or.th/hackers-steal-12-29-million-baht-gsbs-atms/

 
thaipbs_logo.jpg
-- © Copyright Thai PBS 2016-08-23
 
atm.jpg

 

  • Replies 119
  • Views 15.4k
  • Created
  • Last Reply

Top Posters In This Topic

Posted Images

" that 21 of the ATMs had been hacked with the use of Malware programme. "

 

which magically appeared on your ATM's ultra secure computers.

 

"He said that the stolen money belong to the bank, not the customers, so GSB would demand compensation from the manufacturer of the machines. "

 

thanks for the heads up on your banks policy.

Shows yet again how unsafe Thai banks really are.

51 minutes ago, Hawk said:

Shows yet again how unsafe Thai banks really are.

 

No, it doesn't, it shows how insecure NCR cash dispensers are.

58 minutes ago, NCC1701A said:

" that 21 of the ATMs had been hacked with the use of Malware programme. "

 

which magically appeared on your ATM's ultra secure computers.

 

"He said that the stolen money belong to the bank, not the customers, so GSB would demand compensation from the manufacturer of the machines. "

 

thanks for the heads up on your banks policy.

 

Is there something wrong with a bank's policy to get it's stolen money back?   The statement doesn't say the policy would be any different if it was customer's accounts that were involved.

 

well... there goes the balance of the GDP in one foul swoop of the golden egg basket

Should have covered up the USB port, and disabled the WiFi hotspot...

14 minutes ago, gdgbb said:

 

No, it doesn't, it shows how insecure NCR cash dispensers are.

 

Yes it does  show how unsafe Thai banks really are, as it casts yet another light on all the Thai banking flaws.

so GSB would demand compensation from the manufacturer of the machines."

 

 

The weakness is obviously in the software not in the machine itself. So who designed the Thai software?

8 minutes ago, Hawk said:

so GSB would demand compensation from the manufacturer of the machines."

 

 

The weakness is obviously in the software not in the machine itself. So who designed the Thai software?

 

Advice from NCR to ATM operators

 

They seem to provide a good service to ATM operators from what I can see on their website. I think the fault lies with the bank.

21 x 40,000 = 12.29 million

 

am I missing something ?

1 hour ago, Hawk said:

 

Yes it does  show how unsafe Thai banks really are, as it casts yet another light on all the Thai banking flaws.

 

No, it doesn't.  It was a flaw in a British made cash dispenser's security system.  The GSB is not an unsafe bank, wasn't before this hack and still isn't.

59 minutes ago, Hawk said:

so GSB would demand compensation from the manufacturer of the machines."

 

 

The weakness is obviously in the software not in the machine itself. So who designed the Thai software?

 

Very often foreign companies are contracted by Thai banks to set up their security systems.

47 minutes ago, Don Mega said:

21 x 40,000 = 12.29 million

 

am I missing something ?

 They withdrew 40k from 21 ATMs each time, not just one time.

Malware of this type almost certainly needs one of two things:

- Physical access to the ATM itself

- Assistance from a bank employee

 

I''d say it's most likely the bank's fault.

 

 

Well why not show us the pictures of the one who withdrew the cash?

The Bank still using Windows XP ?

regards Worgeordie

8 minutes ago, worgeordie said:

The Bank still using Windows XP ?

regards Worgeordie

Yeah, auto update doesn't work on pirated software.

1 minute ago, halloween said:

Yeah, auto update doesn't work on pirated software.

 

auto update works just fine on my dodgy copy of win7

1 hour ago, gdgbb said:

 

No, it doesn't.  It was a flaw in a British made cash dispenser's security system.  The GSB is not an unsafe bank, wasn't before this hack and still isn't.

Surely the software would not have been provided by the manufacturer. I would be more likely to consider the software is or local origin as it has to support the Thai language. 

Cops investigating mass digital theft of state bank ATMs

By Sasiwan Mokkhasen, Staff Reporter

 

GSB-ATM.jpg

ATMs in front of the Government Savings Bank headquarters in Bangkok are out of service as seen on Tuesday.

 

BANGKOK — Police say they are seeking the perpetrators who stole more than 12 million baht from teller machines owned by the Government Savings Bank by infecting them with computer virus.

 

The attack reportedly took place early this month and forced the state-owned bank to suspend 3,343 of its cash dispensers since Aug. 8, but the bank only told the public about the incident on Tuesday. Police also described the digital heist as the first one of its kind in Thai history.

 

Full Story: http://www.khaosodenglish.com/news/business/2016/08/23/cops-investigating-mass-digital-theft-state-bank-atms/

 
khaosodeng_logo.jpg
-- © Copyright Khaosod English 2016-08-23
1 hour ago, gdgbb said:

 

No, it doesn't.  It was a flaw in a British made cash dispenser's security system.  The GSB is not an unsafe bank, wasn't before this hack and still isn't.

 

It was a flaw in the Thai designed software program and nothing to do with the Scottish hardware.

3 minutes ago, gandalf12 said:

Surely the software would not have been provided by the manufacturer. I would be more likely to consider the software is or local origin as it has to support the Thai language. 

Don't see that to be the case. The ATM has only a very limited set of preprogrammed responses depending on which buttons are pushed. The content of the screen display could be in any language as they are simply images. There are no inputs in Thai language.

1 hour ago, gdgbb said:

 

No, it doesn't.  It was a flaw in a British made cash dispenser's security system.  The GSB is not an unsafe bank, wasn't before this hack and still isn't.

 

If someone gained access to the service ports of the ATM, it's the bank's fault for not securing it properly.

If someone was paid to install the malware, it's the banks fault for not screening its employees properly and auditing their work.

Any way you slice it, I reckon it's their cockup.

 

Furthermore, if the ATMs were running Win XP embedded and they were not paying for it to be patched, they need a kick up the ar$e.

1 hour ago, gdgbb said:

 

Very often foreign companies are contracted by Thai banks to set up their security systems.

 

This was a software issue not a security systems issue,  the hackers simply gave the software program a new command to follow and it did.

So easy to steal money from atm`s this way.

I have been thinking about why not happen before.

When you go any place and see atm machine you always see the box with all the cables, and if you place malware infected usb into the box, tecnically your already in the machine system, and can control whatever you want.

If someone is not a complete idiot, he can do it in 5 minute, and empty the machine without any problem.

Same thing has ben going in china also.

Always somebody else's fault.....

 

 

If there's a non-Thai entity somewhere along the supply chain, you better be sure it's going to be their fault. :rolleyes:

 

Thainess is just so predictable. :(

Create an account or sign in to comment

Recently Browsing 0

  • No registered users viewing this page.

Account

Navigation

Search

Search

Configure browser push notifications

Chrome (Android)
  1. Tap the lock icon next to the address bar.
  2. Tap Permissions → Notifications.
  3. Adjust your preference.
Chrome (Desktop)
  1. Click the padlock icon in the address bar.
  2. Select Site settings.
  3. Find Notifications and adjust your preference.