Warning to banks: ATM hacking is easy; do something about it

Hacking an ATM machine has become easy as instructions can be found on the internet, says a security expert. The NBTC says Thailand is in critical need of a cybersecurity centre.

Please join us on our Facebook page http://www.facebook.com/bangkokpostlearning

Bank customers were back using their ATM cards normally yesterday as the recent thefts did not come from customer accounts. Banks, however, face a big problem and today's Bangkok Post has several stories on the problem and what needs to be done about it. Here are excerpts from two of the stories.

Those Government Savings Bank ATMs still open received heavy use yesterday as customers realised their accounts had not been hacked. WICHAN CHAROENKIATPAKUL

Criminals find ATM hacking easy via the net

Ariane Kupferman-Sutthavong

Prinya: Instructions available on YouTube

Hacking an ATM machine has become easy as instructions can be found on the internet, says a security expert.

"It's now terribly easy to hack an ATM machine," says Prinya Hom-Anek, Thailand Information Security Association's vice-president. "You can find instructions on YouTube."

More valuable pieces of information are commonly traded – or put up for sale – among hackers on the dark web.

The ATM hacking methods shared online truly work, Mr Prinya added. Criminals use "malware", a malicious software, which they introduce to the ATM's computer system to give them full access and authority over the machine.

"In a way, the hackers become administrators of the ATM's computer," he explained. "They can order it to perform any tasks, including spilling out banknotes."

Only a month after criminals made off with the equivalent of US$2.2 million (76 million baht) in a major ATM theft in Taiwan, the Government Savings Bank (GSB) revealed on Tuesday it had fallen victim to a similar attack.

Security centre urged after GSB theft

Suchit Leesa-nguansuk

Thailand is in critical need of a cybersecurity centre that can immediately tackle a cyberattack, says the National Broadcasting and Telecommunications Commission.

"The lack of a cybersecurity centre may be a major loophole prompting hackers to target Thailand, as they will have time to flee before the affected bank network notices the unusual activity," said NBTC vice-chairman Settapong Malisuwan.

His remarks followed a shutdown by Government Savings Bank (GSB) of half its ATMs after the discovery that some of them were infected with malware by thieves who emptied the machines. They stole about 12 million baht from 21 ATMs.

Thailand has a high rate of malware infection, with 2,400 cases in the first half of this year after 3,000 in all of last year.

A cybersecurity expert who declined to be named said ATM software is typically more vulnerable than other types because it is designed with an open operating system to accept various cards.

"The financial institutions have provided clients with services through the electronic platform, yet no one is active in launching an immediate counter-strike on hackers," he said.

He said financial institutions should realise that they are unable to rely on state agencies like the Technology Crime Suppression Division, which has limited capability in terms of human resources and software.

"Given the rapidly rising trend of cyberattacks in Thailand these days, I would like to point out that we are in critical need of a specialised centre to tackle this issue," Mr Settapong said.

The specialised centre should be an independent agency instead of keeping it under the supervision of a single ministry, he said, adding that the prime minister or a deputy prime minister should lead a team to shorten the set-up process.

Mr Settapong estimated it would take one year at a minimum for the centre to be ready.

You can read our previous story here: http://www.bangkokpost.com/learning/advanced/1069789/police-suspect-foreigners-in-12m-baht-atm-theft

สามารถฝึกอ่านออกเสียงและดูคำแปลได้ที่ : http://www.bangkokpost.com/learning/learning-from-news/1070561/warning-to-banks-atm-hacking-is-easy-do-something-about-it