Open A Service Order 800-423-3343 (EDGE)

ATM Software Archives - Financial Equipment for Retail & Financial Institutions | Edge One LLC

ATM Software

ATM Jackpotting – What You Need to Know

by

ATM jackpotting isn’t new. Back in 2010, a security researcher named Barnaby Jack took to the stage at a Black Hat security conference to demonstrate this ATM exploitation, making two ATMs dispense fake paper currency. It would be 8 years later when the first ATM jackpotting attack would occur in the United States. Now, this form of ATM attack is on the rise. So, what exactly is jackpotting and what can you do to protect your ATM investment?

What is ATM Jackpotting?

With ATM Jackpotting, thieves typically target stand-alone or retail ATMs in locations that help them avoid a bank’s security. They will often dress as a service technician and access the ATM using force or keys that are purchased easily on the internet. Once they have gained access, the criminal can connect to the ATM and install malware that enables theft of the cash reserves. They will often have an accomplice that will visit the ATM once they have left to collect the cash.

Laptop Keyboard with Hacked Key - Protect your ATM from jackpotting with Edge One

How do I protect my ATM from jackpotting?

While cyber criminals continue to look for vulnerabilities, there are several things that an ATM owner can do to help mitigate their risk. These low-cost, simple practices can help avoid being left vulnerable to cyber jackpotting attacks.

Security camera - Secure your ATM

ATM Placement

These thieves are on the lookout for ATMs that allow them to get in and gain access without detection. Unfortunately, many retail establishments will leave their ATM in a dark area in the back of the store or restaurant. It is important to place your ATM in a well-lit area that is easily monitored by staff and security cameras. Be sure to place security cameras with angles that provide a clear view of both the back and the front of the machine.

Software Updates

ATM manufacturers release regular software updates and related modifications that ensure ATMs stay ahead of potential risks and emerging threats. Old, outdated ATM software leaves your machine open to a variety of issues, jackpotting included. It is important that you install software updates as soon as possible after release.

Know your technicians

Familiarize yourself with the company responsible for the maintenance, replenishment and updating of your ATMs. Get to know their vehicles, uniforms, and your assigned technicians. Do not be afraid to ask for identification. Your ATM management company should be forthcoming and communicative so that you can stay informed of any changes in schedule or assignments.

Contact Edge One to Protect Your ATM Assets

The Edge One team can provide you with a free risk assessment to determine any vulnerabilities that may be present. Our team of professionals will provide a plan of action to ensure your ATMs are up to date, safe, and secure. For more information, Contact the team at Edge One at 800-423-3343(EDGE).

Upcoming PCI / EPP Compliance Mandates

by

In 2019, PCI (Payment Card Industry) announced new revisions for PCI PIN security requirements. PCI’s function is to set standards that ensure secure handling of customer PINs and data. PCI planned for a phased implementation of updates to provide a more secure method of transferring encryption keys from an ATM’s host processor to the ATM. Circumstances, such as Covid-19, resulted in an update to the compliance deadline dates. The dates below reflect these changes.

PCI PIN Security Requirement Dates:

  • December 31, 2022: Replace ATMs or upgrade EPP for ATMs with PCI PTS v1 or older
    (v1 EPPs are Less secure technology)
  • January 01, 2025: EPP hardware, firmware and software uses TR31 Phase 3 “Key Blocks”

Are your ATMs compliant?

In order to ensure the integrity of your ATMs, the current hardware and software needs an update. Failure to do so leaves your ATMs vulnerable. These vulnerabilities include risk of fraud, security attacks, data compromises and loss of revenue. As an ATM owner, the ATM networks consider you liable for any fraud or data breach involving your ATM. You could assess penalties or have any non-compliant ATMs shut down.

Additional Information:

PCI Bulletin

HYOSUNG ATM Security PCI Compliance Update

VISA PIN Security Bulletin

What actions should you take to ensure your ATMs are ready?

Prior to January 1, 2025, all ATMs will require, at a minimum, a software update. In addition, you may be required to replace your electronic PIN pad (EPP) or your ATM entirely. If you own or operate an ATM, do not leave this to chance. Contact the team at Edge One at 800-423-3343(EDGE). We will help audit your ATM fleet to ensure you are updated and compliant.

,

The Shift to Software Subscriptions

by
Saas image - The Shift to Software Subscription

Consumer behavior is shifting, and many find the convenience of subscription appealing. From streaming television and music to meal preparation and household cleaning products, consumers now subscribe to almost everything. It is convenient. It is easy to just enter in your credit card and have a service delivered to you. Software is no exception. Over the last decade, we have seen software companies making the shift from traditional licensing to a subscription model. Experts are estimating that by 2023, 53% of all software revenue will come from subscriptions.

Why the shift?

It isn’t just the consumers driving this change. Companies are increasingly switching to a subscription-based revenue model. Subscriptions mean a consistent source of revenue that businesses can depend on. It isn’t just beneficial for businesses, however. Subscription based software also allows for affordability with a lower barrier to entry. Rather than a large sum paid out for a piece of software, you pay smaller amounts over time. Add in no-long term contracts, and it is easy to see the appeal of this software purchase option for the consumer.

Perpetual Licensing

Perpetual licensing is the more traditional model we are all familiar with. You pay a fee up-front for the right to use the software indefinitely. While this may sound like the more appealing option, there are limitations. Typically, the license may include some limited support and updates for a short time frame. Once that time is up, you no longer have access to those updates or support. Additionally, the software may be tied to a particular piece of hardware. If you upgrade that hardware, you are left having to re-purchase the same software. That can get expensive. Often a perpetual license comes at a large price tag. This barrier to entry can be cost prohibitive for small or start-up businesses.

Image of Software - ATM software from Edge One
computer-3219130_640

Subscription Licensing

With software subscriptions, consumers pay a monthly or yearly fee for access to the software. Sometimes there is a per-user fee. While subscribed, users can use the software and have access to support and updates, indefinitely. The subscription is typically tied to a user, not a piece of hardware. Meaning, you can continue using the software, even if you upgrade your hardware or change your system entirely. The up-front subscription fee is typically much lower than a traditional license, making it more affordable to get started.

ATM Software Subscription

With the move to software subscription happening everywhere, it should come as no surprise to learn that most major ATM manufacturers are doing the same thing. To streamline software offerings, subscription offers a much more common industry practice. Edge One always strives to be on the cutting edge with our hardware and software offerings. We have already begun updating some of our software offerings to reflect these changes. As always, we work to provide our customers with top-notch value and service.

Edge One’s Software Subscription Value

Simplification: Simpler product structures mean you only pay for what you use. No need to re-purchase every few years.

Entitlement: License transferability is now permitted on subscriptions. Licenses are no longer tied to individual hardware. this means there is no need to buy new licenses when hardware is replaced.

Flexibility: Simpler fleet management. Add/remove hardware, software options, or products. Adjust your subscription based on your needs. This provides a flexibility that legacy perpetual licensing didn’t have.

Choose Edge One for Your ATM Software

Edge One has always brought to the table a comprehensive list of offerings to keep your fleet in top shape. We have the latest in software offerings and software maintenance to keep you up to date and running smoothly. Our Compliance Audit Program ensures you remain PCI compliant. And, if you want to focus less on your ATMs functionality and more on running your business, Edge One’s ATM Management Program delivers. To find out more, Contact Us at 800-423-3343(EDGE)

ATM Security – What You Need to Know

by
The Word Security on Screen - ATM security

ATMs have long been a prime target for criminals.  ATMs deliver cash, credit and debit bank accounts, and as technology advances, they can serve even more functions than before.  For thieves looking for quick cash, ATM crime can be enticing. This means that financial institutions and retailers are constantly fighting attacks. Edge One wants to ensure you are informed when it comes to the different types of ATM security threats and the weapons available for their defense.

Image of a Chain - Hook and Chain Physical ATM Attacks

Physical ATM Attacks

These attacks involve thieves using brute force to gain access to the ATMs. A few of the more common types of physical attacks are:

  • Hook and Chain
  • Ram-raid / Pull-out
  • Cash Trapping
  • Explosive / Gas Attacks

Freestanding drive-up ATMs are particularly vulnerable to these attacks. We are seeing an increase in frequency in these physical ATM attacks here in the U.S. Luckily, there are options for protecting your ATMs.

Logical ATM Attacks

As ATM technology advances, so do the methods criminals use to gain access to the funds they contain. Logical attacks are instances where criminals use electronic devices or malware to gain access to the ATM.

These attacks can include:

To protect yourself from logical attacks, it is critical that all ATM operators remain proactive and vigilant.

The Word Security on Screen - ATM security

Plan Your Defensive Strategy

The most effective ATM security strategy for your fleet is a through a comprehensive, multi-layered approach. The team at Edge One can provide you with a vulnerability assessment and develop a plan to mitigate your risks. Contact Us at 800-423-3343(EDGE).