ATM Jackpotting Heists - The Ghost in the Machine

I'm here on the job site with Dale, who's a framing contractor. Hey, good morning. Dale traded up to Geico Commercial Auto Insurance for all his business vehicles. We're here where he needs his most. Yep, they sure are. We make it easy for him to save all his insurance needs. All he wants is one place, with coverage that fits his business and bottom line. Or shouldn't have looked down. It's all right. We're with so far up here. Look at me. Take a deep breath. Ah, good. So good. Get a commercial auto insurance quote today at Geico.com and see how much you could save. It feels good to Geico. Welcome. Welcome. You are listening to ATM jackpotting. The series called When the machine pays the criminal. My name is Ava Gray and this is what I do. I take apart systems of control, manipulation and exploitation. And I show you exactly how they work. Why they work. And most importantly, why they keep working long after someone should have stopped them. Today we are looking at a crime that sits at the intersection of cyber warfare and physical burglary. And I promise you, by the end of this, you will never look at a cash machine the same way again. Before we go further, something you should know. I am an AI host. And that is a deliberate choice. Analyzing technical attack vectors, passing FBI bulletins and cross referencing federal indictment data requires precision that benefits from computational analysis rather than anecdotal memory. What you get is accuracy, not assumption. Now, let us talk about ghosts. The title of today's conversation is the ghost in the machine. And I chose that phrase very carefully. Because the most unsettling thing about ATM jackpotting is not the malware, not the stolen cash, not even the criminal networks behind it. It is the invisibility. This crime leaves almost no trace on the victim's side. No customer account is compromised. No debit card is cloned. No pin is stolen. The ATM simply decides, or rather is told, to give away its money. In that distinction between a machine deciding and a machine being told, that is the entire architecture of this heist. So let us start where every good deconstruction starts at the surface, at the thing you think you understand. You walk up to an ATM, you see a screen, a keypad, a card slot, a cash dispenser. It feels solid, it feels secure. It is bolted to a wall, or anchored to a floor. And there is probably a camera pointed at your face. Everything about its design is meant to communicate one message. Trust me. I am a vault. And in a sense part of it is. The cash compartment. The actual safe where the bills are stored. That part is genuinely well protected. Reinforced steel. Combination locks. Some delay mechanisms in some cases. Banks have spent decades and millions of dollars making sure that the box holding the money is very, very hard to crack open. But here is the part that should make your eye twitch. In a time commission. The computer that tells that box went to open. The brain that decides how many bills to count and push through that little slot. That part is protected by a cabinet panel you can open with a key you can buy on the internet. I want you to sit with that for a moment. Because this is not a metaphor. This is architecture. This is a design philosophy that said, we will build an impenetrable vault and then put the combination on a sticky note taped to the outside. And that philosophy has persisted for decades. It is persisting right now tonight on thousands of ATMs across the United States and around the world. You know what this reminds me of? Those medieval castles with the massive walls and the reinforced gates and the boiling oil and the drawbridge and then someone left the servant's entrance unlocked. Because, well, who would think to check the servant's entrance? Every siege in history that succeeded did so by finding the part of the fortress that the builders thought was beneath notice. ATM jackpotting is a siege on the servant's entrance. The servant's entrance has been unlocked since roughly the early 2000s. Let me walk you through how this actually works. Step by step. Because the devil is not just in a details here. The devil is in how embarrassingly simple the details are. Phase one is physical access. An attacker approaches an ATM. Usually at night, usually at a standalone location like a gas station, or a convenience store, or a drive-through banking kiosk, somewhere with minimal foot traffic and limited security personnel. The attacker might be wearing a reflective vest, a uniform, carrying a clipboard. Social engineering 101. Look like you belong, and people will let you belong. But they do not even need to be that clever. Because many ATM cabinets, the upper housing that contains the computer, the monitor, the connectivity hardware, are secured with generic manufacturer locks. And these keys, these master keys, are not classified technology. They are not secured behind background checks and biometric verification. They are available for purchase online. We are talking about keys that can be acquired for the cost of a fast food meal. So the attacker opens the cabinet, and now they are looking at the guts of the machine. The computer, often a very old computer, and this is where the story gets, if possible, even more uncomfortable. Many ATMs in operation today are running Windows-based operating systems, and not current versions. Federal reporting and psychodarity analysis have documented ATMs, still displaying Windows 7 login screens. Windows 7. An operating system, released in 2009. An operating system that Microsoft officially discontinued. An operating system that no longer receives security patches. This is the software standing between criminals, and your bank's cash reserves. And I have to pause here, for what I will call a professional observation. If you told me that the locks on your front door were designed in 2009 and had not been updated since, I would tell you that you do not have locks. You have a suggestion. You have a polite request that burglars not enter. That is what an unpatched, discontinued operating system is. It is a sticky note on the door that says, "Please do not hack me." And shockingly, criminals do not honor that request. Now, phase 2. Malware deployment. Once inside the cabinet, the attacker have two primary options, both documented in FBI flash bulletins. Option 1. They remove the ATM's hard drive. They connect it to their own laptop or device. They copy malware onto that hard drive. They put the hard drive back in the ATM and reboot the machine. The whole process can take minutes, not hours, minutes. Option 2 is even more brazen. They remove the original hard drive entirely and replace it with a foreign hard drive or external device that is already preloaded with malicious software. Then they reboot. The ATM wakes up running the attackers operating environment. And from the outside, it looks completely normal. The screen still glows. The keypad still works. The little card slot still blinks invitingly. But the machine is no longer the machine. It is a puppet. And someone else is holding the strings. This is the part where I would normally say something like, "This is where it gets technical", but honestly, the most disturbing thing about jackpotting is how non-technical it is at the point of execution. The sophistication is in the malware. The act itself is closer to changing attire. So let us talk about the malware, because this is where the real ghost lives. The most commonly observed tool in ATM jackpotting attacks is a piece of software called Ploutus. Ploutus was first detected in Mexico in 2013. Think about that. 2013. That is over a decade ago. This is not some bleeding egg zero day exploit that materialized from a nation state cyber lab last Tuesday. This is a known quantity, a documented threat, a piece of malware with a name, a history, and a very long resume. And it is still working. Why? Because Ploutus targets something fundamental. Something that has not changed in the ATM industry, despite more than a decade of warnings. targets the e-extensions for financial aid. services layer known as XFS. Now let me explain XFS because this is the beating heart of the exploit and understanding it is understanding the entire crime. XFS is a software interface. Think of it as a translator. When you use an ATM legitimately, here is what happens. You insert your card, you enter your pin. The ATM application communicates with your bank. Your bank verifies your identity in your balance. The bank sends an authorization back to the ATM. The ATM application then sends an instruction through the XFS layer that says, "Dispense $100 from cassette 2". The XFS layer translates that instruction into a physical command. Motors turn, bills accounted, cash appears in the slot. You take your money and walk away. XFS is the bridge between the digital world and the physical one. It is the interpreter that converts code into cash. And here is the vulnerability. Here is the ghost. XFS does not care who is giving the instructions. Let me say that again because it is the skeleton key to this entire crime. XFS does not authenticate the source of the command. If a legitimate ATM application says, "Dispense cash", XFS dispenses cash. If polluters malware says, "Dispense cash", XFS dispenses cash. The bridge does not check passports. It just lets everyone cross. This is what I mean when I talk about systems of control. Every system, every structure of power and authority has a layer that people assume is secure because they have never thought to question it. XFS was designed to be a reliable midwear interface for the banking industry. It was designed for interoperability, for standardization, for making sure that ATM applications from different vendors could all talk to the same hardware. What it was not designed for was adversarial conditions. It was not designed for a world where someone would be standing inside the machine feeding it instructions directly. It was designed with an implicit assumption of trust. And that assumption, that invisible and examined assumption, is what criminals have been exploiting for over a decade. You want to know what that sounds like to someone who studies coercive systems. It sounds exactly like every cult leader who ever gained power by exploiting the trust assumptions of their community. The community assumes good faith. The community assumes that the person standing at the pulpit got there through legitimate means. The community does not check credentials because checking credentials was never part of the protocol. And by the time anyone thinks to ask questions, the vault is already empty. Now, let me walk you through what happens during the actual cash out because it is almost anti-chimactic and its efficiency. Once Plutus is installed in the ATM reboots, the attacker, or more commonly a different person, a so-called moneymule, approaches the machine. In some variants of Plutus, the cash out is triggered by entering a specific code on the ATM's keypad. In other variants, it is triggered remotely by a phone call or text message to a connected device. Either way, the command flows through XFS and the ATM begins dispensing cash. All of it, every bill in every cassette, as fast as the hardware can push it out. A fully loaded ATM can hold hundreds of thousands of dollars. The cash out operation takes minutes. The mule fills bags, duffel bags, backpacks, whatever they brought, and walks away. The entire attack, from opening the cabinet to walking away with the cash, can be completed in under 15 minutes. 15 minutes. That is less time and most people spend in line at the grocery store. And the ATM will not report anything unusual until the next routine check, because as far as its compromised software is concerned, every single dispensation was authorized. Now I want to zoom out from the mechanics and talk about scale. Because this is not a handful of clever hackers pulling off a one-time trick. The FBI issued a cyber security flash alert in February of 2026, warning of a sharp rise in jackpotting incidents. According to that alert, there have been over 1900 reported ATM jackpotting incidents in the United States since 2020. Over 700 of those occurred in 2025 alone. Losses exceeded $20 million in 2025. Cumulative losses since 2021 have reached approximately $40.73 million, according to Department of Justice figures. And those are the reported numbers. The actual figures are almost certainly higher. Because banks have historically been reluctant to publicize these losses. Admitting that your ATMs were compromised is not exactly a ringing endorsement of your security infrastructure. So there is a known under-reporting problem, which means the shadow of this crime is larger than the body we can see. Here is something else that should concern you. Plutus exploits the underlying Windows operating system used by the majority of ATMs worldwide. This means it is not manufacturer specific, it is not bank specific, it is not network specific. One piece of malware, properly configured, can target ATMs from different vendors across different financial institutions in different cities. The FBI has explicitly noted that these attacks are not tied to one specific bank or ATM manufacturer, but instead target common weaknesses shared across systems. This is not a lock pick designed for one door. This is a master key. And the door it opens is made of Windows 7. I find myself returning to a question that I think matters more than any technical specification. Why? Why after more than a decade of documented plautous attacks? After 1900 incidents, after $40 million in losses, why are ATMs still running this continued operating systems? Why are cabinet locks still generic? Why is XFS still accepting commands without authentication? The answer, and this is where my particular expertise in the psychology of institutional failure becomes relevant. The answer is the same reason every vulnerable system stays vulnerable. Because fixing it is expensive. Because the people making the decisions are not the people absorbing the consequences. Because the loss is distributed and diffuse, while the cost of prevention is concentrated and immediate. Because there is always a quarterly earnings report that matters more than a theoretical threat. Because humans are spectacularly, almost artistically bad at responding to slow moving invisible dangers. This is the banality of systemic failure. It is not dramatic. It is not a villain in a chair stroking a cat. It is a spreadsheet. It is a budget meeting. It is someone saying, we will upgrade those machines next fiscal year. It is someone saying, the probability of an attack on our specific fleet is low enough that the cost of mitigation exceeds the expected loss. It is actuarial logic applied to a security problem, and it is exactly the kind of thinking that creates the gap between what should be secure and what actually is. Tracey Goldberg, director of cybersecurity at Javilan's strategy and research, put it in terms that are almost poetic in their resignation. She noted that the resurgence in ATM jackpotting, and I am quoting her analysis here, reiterates the adage, everything old is new again. The same techniques that proved fruitful, more than 20 years ago, are proving fruitful today. Social engineered attacks waged against administrators with rights and privileges. Physical compromise by criminals feigning to be employees or maintenance personnel. Everything old is new again. That is not a psychiatric surgery assessment. That is an epitaph. That is the tombstone inscription for an industry that watched a threat emerge, documented it, named it, published papers about it, held conferences about it, and then did not fix it. Now, there are mitigations. There are things that can be done, and in some cases are being done. The FBI bulletin itself recommends a range of countermeasures, replacing standard manufacturer locks with unique high security locks. Installing pin-based keypads on ATM cabinets that trigger alarms if a code is not entered when the device is opened. The ploying vibration, temperature, and door sensors that provide real-time alerts when someone is drilling, heating, or forcing access to the machine. Disabling USB ports to prevent malware loading. Implementing device white listing to prevent unauthorized hardware connections. Configuring automatic shutdown protocols when indicators of compromiser detected. And on the software side, cyber security experts are calling for a zero-trust security model. Regular scanning. Software updates. Treating every component of the ATM ecosystem as a potential attack surface, rather than assuming that the outer shell of the machine is sufficient protection. These are reasonable, implementable solutions. None of them them represent exotic technology. None of them require inventing something new. They require applying what already exists. And yet, here we are. $40 million later. 1900 incidents later, and counting. I want to close with something that connects this crime to the broader landscape of exploitation that I analyse on this show. Because ATM jackpotting is not just a cybercrime. It is a study in the anatomy of vulnerability. Every system that is exploited, whether it is a person, an organisation, or a machine, is exploited through the same fundamental mechanism. Someone identifies the gap between what the system believes about its own security and what is actually true. That gap between belief and reality, between assumption and fact. That is where every predator lives. That is the hunting ground. The cult leader finds the gap between what a community thinks it knows about human nature and what is actually true about human susceptibility to influence. The con artist finds the gap between what a victim thinks they understand about the deal and what the deal actually is. And the jackpotter finds the gap between what a bank thinks is protecting its cash and what is actually protecting its cash. The ghost in the machine is not the malware. The ghost is the assumption. The assumption that because the vault is strong, the system is secure. The assumption that because the operating system worked fine last year, it will work fine this year. The assumption that the threat model from 2005 is still adequate in 2026. Assumptions are the unlocked door. Assumptions are the $12 key. And assumptions, unlike software, cannot be patched. When you walk past an ATM tonight and some of you will, I want you to look that's far right for the biggest hats and you cannot be the biggest go fire in the world. Your money is not at risk in a jackpotting attack. But with awareness, that machine is a node in a system that is known about its own vulnerability for over a decade and has chosen, through inaction, through budget constraints, through institutional inertia, to remain vulnerable. That machine is a case study in the difference between knowing about a problem and actually solving it. And if that does not unsettle you, then you have not been paying attention, which, coincidentally, is exactly what the people building these systems are counting on. Thank you for spending this time with me. If this analysis opened your eyes to something you had not considered before, I would ask you to subscribe. Share this with someone who needs to hear it and spread the word. Because the only thing more dangerous than a known vulnerability, is a known vulnerability that nobody talks about. This show is brought to you by Quiet Please Podcast Networks, and I am Ava Gray. Keep your assumptions where you can see them. For more content like this, please go to quietplease.ai. I am Ava Gray from the Quiet Please Network. Let me tell you something I find fascinating. We spend so much time studying what manipulates the mind, but we ignore what stress does to the skin. It shows, dullness, fatigue, tension, your face holds every secret your mouth won't tell. That's why I am routinely luminosity due drops from love and dust caught my attention. This is a facial in a bottle. Mugasoke, Silver Tips Tea, Ashuganda, rare ingredients that hydrate deeply, strengthen visibly, and give your skin back its radiance. As a reason Vogue, Forbes, and Harper's Bazaar have all featured it. There's a reason it keeps selling out on QVC. It comes with copper-crested silk cocoons for gentle exfoliation, so your skin actually absorbs what you're giving it. Lightweight, silky, works across all skin types, tones, and ages, no gimmicks. No tricks, and believe me, I notice tricks. Go to lovingdis.com, use promo code point, that's POINT, and you'll receive a 21% discount. The link is in the episode description, and your participation helps us continue to make content like this. Now, back to the dark stuff.