Awesome ATM Hacking

A curated list of awesome ATM hacking resources.
Feel free to suggest blogs, papers and talks.

Offensive

• Everything you need to know about ATM attacks and fraud
  • Part 1
  • Part 2
• ATM Hacking Cracking the Code
  • Part 1
  • Part 2
  • Part 3
  • Part 4
• Penetration Testing
  • The role of Penetration Testing in ATM Cybersecurity
  • Advanced ATM Penetration Testing and Data-Driven Security assurance
• Hacking Next-Gen ATMs
• Advanced methods for finding security vulnerabilities
• Replay Attacks
• Screwed Drivers
• Logical Attacks
• Dark Web and ATM hacking
• Kiosk Breakout
  • Introduction to Kiosk Breakout
  • Escaping from Kiosk
  • Restricted Browser
  • Escaping ATM kiosk
  • Kiosk Mode Breakout Tips
  • ATM Kiosk Labs
    • Part 1
    • Part 2

ATM Security reports

• Kaspersky Lab
• Europol x TrendLab
• Consorzio Bancomat x Diebold Nixdorf x Kaspersky Lab x NCR x Security Brokers

CEN/XFS

• CEN/XFS Wikipedia
• CEN/XFS Workshop
• Analyzing XFS API Calls

Malwares

• Ploutus
• Cutlet
• GreenDispenser
• FiXs
• UNC2891 Raspberry Pi ATM Implant

Compliance

• ATM Security Compliance in 2025
• PCI PTS POI v7.0
• PCI PIN transation security

Talks

• Hacking ATMs on a Budget
• Hacking Next-Gen ATMs
• Jackpotting Automated Teller machines Redux
• Bank Heist: UNC2891 Case Study
• Take all my money – penetrating ATMs
• Make ATM Jackpotting Great Again, the Ocelot way!
• Protecting ATMs from blackbox attacks
• Introduction to ATM Penetration Testing
• Where’s the Money: Defeating ATM Disk Encryption
• Dissecting ATM Malware
• ATM Security, Preventing Attacks & ITM Exploration