Nachi worm infected Diebold ATMs

The Nachi worm compromised Windows-based automated teller machines at two financial institutions last August, according to ATM-maker Diebold, in the first confirmed case of malicious code penetrating cash machines.

The machines were in an advanced line of Diebold ATMs built atop Windows XP Embedded, which, like most versions of Windows, was vulnerable to the RPC DCOM security bug exploited by Nachi, and its more famous forebear, Blaster.

At both affected institutions the ATMs began aggressively scanning for other vulnerable machines, generating anomalous waves of network traffic that tripped the banks' intrusion detection systems, resulting in the infected machines being automatically cut off, Diebold executives said.

"The outbound traffic from the ATM was stopped -- limited, from a network standpoint -- and effectively isolated," said Nick Billett, Diebold's director of software engineering. "In many cases, the machines were cleaned up that day."

A patch for the critical RPC DCOM hole had been available from Microsoft for over a month at the time of the attack,but Diebold had neglected to install it in the infected machines. Billett defended the company's patching process, which he said involves testing each new bug fix, and deploying at a wide variety of institutions with a mix of network architectures. "A lot of those machines actually have to be visited by a service technician" to be patched, said Billett. "Our experience in the past is we are able to turn those around in one or two days."

More here.....

Not sure if this has been posted yet.

Read Paul Klugman in today's NY Times Op ed. Is Diebold destroying democracy? That is the question everyone should be focused on

Read Paul Klugman in today's NY Times Op ed. Is Diebold destroying democracy? That is the question everyone should be focused on

Within a year, checks clearing banks will not be physically sent on to the Fed Reserve. They will be transmitted electronically. It means all new systems for banks. I was wondering what companies make the hardware and software for this new system. Sure it should make bank transactions faster and cheaper (for the banks) in the long run, but there will be a lot of $$ involved in gearing up for it.

Who is gonna make the bundle selling the required equipment? And how secure will it all be?

I am not a techie, so I need simple answers. Since Diebold makes so much used in banking, could this be a payoff for their assistance in congressional races that suddenly went GOP? And since BBV and others have shown Diebold to be so lax about security, are our banking insitutions gonna be open to even more danger from hacking, viruses, just plain ol greedy bastards who have a track record for juggling books?

Scares the shit out of me. I refuse to give checks to businesses who use electronic processing now.

Number 1, what happens to my physical check? How do I know it won't end up in the hands of shady characters?

Number 2, if the business or their bank processes the check for an incorrect amount, what proof do I have that the check was written for a different amount?

Number 3, if the check is processed electronically, the bank cannot verify that my signature is on it, or that any signature is on it for that matter.

The good news is that the banking industry is highly regulated with triple and quadruple checks and balances. That is the difference between diebold's work in the banking industry and their work in voting machines. I trust my bank because I know that bank regulators, the treasury department and its stockholders and in some cases the FBI all have their eyes on everything that gets done there. The depression of the 30's with its run on banks taught Bankers that their success or failure depends on how trustworthy their customers view them. They work hard to make accuracy their first job.

We are both the bank and the consumers when it comes to voting machines and we have to be out there demanding the same accuracy, the same security and the same oversight. That is the answer.

This is probably not what you were looking for but as close as I can get.

Just wanna find out about this Check 21 and who stands to make the big bucks selling equipment for the changes. ALL banking will be via electiconic transmittal by next Oct. No one will get cancelled checks back. You bank will not have your checks if they are cashiered out of the area. Only electiconic imagaining forms.

Somebody is makeing $$ on this and I bet Diebold has a big cut coming.