ATM Malware reaches Western Europe

The European ATM Security Team (EAST) has reported the first ATM Malware incidents recorded in Western Europe. In a European ATM Crime Report covering H1 2014 EAST has reported an estimated 20 incidents of ATM Malware.
EDINBURGH, Scotland - Oct. 14, 2014 - PRLog -- These were ‘cash out’ or ‘jackpotting’ attacks and all occurred on the same ATM type from a single ATM deployer in one country.  While many ATM Malware attacks have been seen over the past few years in Russia, Ukraine and parts of Latin America, this is the first time that such attacks have been reported in Western Europe.

EAST Executive Director Lachlan Gunn said, "While this was one group of criminals attacking a single ATM type in a specific type of location, this is a worrying new development for the industry in Europe.  Through the EAST Expert Group on ATM Fraud (EGAF) we have been working with the ATM Vendors, and vendors of logical security systems and services, to communicate the steps that should be taken by ATM deployers and networks to mitigate these risks across all ATM types and locations.  The industry in Europe has taken significant steps to reduce ATM related fraud and the overall drop in incidents reflects this.”

There was a 42% decrease in ATM related fraud attacks, when compared to the same period in 2013.  For the first time card trapping incidents were in the majority with 2,579 such incidents reported, up 49% from the 1,735 incidents reported in H1 2013.  Card skimming incidents fell by 21% (continuation of a downward trend that started in 2010), cash trapping attacks by 52% and incidences of transaction reversal fraud by 96%.

Overall ATM related fraud losses of €132 million were reported, up 7% from the €124 million reported in H1 2013.  The majority of these losses (€129 million) are due to card skimming and the increase has been driven by a rise in international losses (losses on domestic cards taking place outside national borders).  Such losses rose by 11% when compared with H1 2013 (up from €100 million to €111 million).  Nearly all these losses are occurring in the United States, Asia-Pacific and Latin America.

ATM related physical attacks on European ATMs increased by 3% (up from 1,007 to 1,032 incidents) driven by an increase in vandalism and other minor attacks.  The number of solid explosive and explosive gas attacks at ATMs fell by 12% (down from 337 in H1 2013 to 298).  Such attacks were reported by eight countries, four of them countries with more than 40,000 ATMs installed.  An increase in solid explosive attacks is an emerging trend.

Overall reported losses due to ATM physical attacks rose 29% to €13 million.  Combined losses due to ram raids, ATM burglary and explosive attacks increased by 24% when compared to the same period in 2013 and the average cash loss for such attacks is €14,109 per incident.

A summary of the report statistics under the main headings is in the table below.  The full report, with breakdowns for each crime category, is available to EAST members and subscribers on the EAST website


(Background data on the report & EAST follow)

EUROPEAN ATM CRIME REPORT H1 2014, Period: January to June 2014

The above release is based on a report prepared twice-yearly by EAST to provide interested parties with an overview of the European ATM crime situation.  It has been produced for EAST National Members, EAST Associate Members and EAST Subscribers, using statistics provided from 20 European states. The following countries, with an estimated total installed base of 367,851 ATMs, supplied full or partial information for this report:

Austria;  Belgium;  Czech Republic;  Denmark;  Finland;  France;  Germany;  Greece;  Ireland;  Italy;  Liechtenstein;  Luxembourg;  the Netherlands;  Portugal;  Romania; Slovakia;  Spain;  Sweden;  Switzerland;  the United Kingdom.

EAST intends to obtain such information from all 28 European Union states as well as from Iceland, Liechtenstein, Norway, and Switzerland.

EAST has taken reasonable measures to develop the report this press release is based on in a fair, reasonable, open, and objective manner.  However, EAST makes no claims, promises, or guarantees about the completeness of the underlying data.  In addition, as the information in the report has been passed to EAST by other parties, errors or mistakes may exist or be discovered.  Neither EAST nor its members, authors, or agents shall be liable for any loss, damage, or claim with respect to any such information being provided.  All such liabilities, including direct, special, indirect, or consequential damages, are expressly disclaimed and excluded.


Founded in February 2004 EAST is a ‘non-profit’ organisation whose National Members are committed to gathering information from, and disseminating EAST outputs to, ATM deployers and networks within their countries/regions. While the main focus of EAST is on ATMs, the Group also focuses on all payment terminals that have a direct impact on crime perpetrated at ATM locations.

Our mission is to gather and provide information to the European ATM industry and to facilitate effective representation of ATM related security issues at relevant European central institutions, through a pan-European co-ordination of ATM security resources.

EAST has set up a framework network structure to improve co-operation with industry, law enforcement, and in particular Europol, in order to achieve awareness and better results in the fight against organized cross-border crime.  EAST National Members represent 29 countries with a total deployment of 639,379 ATMs.

The EAST Expert Group on ATM Fraud (EGAF), formed in May 2013, provides a European specialist expert forum for discussion of ATM related fraud trends, fraud methodologies and counter-measures, and for the provision of regularly updated  lists of known devices used for card or PIN or data compromise, for cash trapping, and for lists of known counter-measures.  Through EAST ATM Fraud Alerts EAST is able to communicate important and timely information to its National and Associate Members.

The EAST Expert Group on ATM Physical Attacks (EGAP), formed in May 2014, provides a European specialist expert forum for discussion of ATM related physical attack trends, attack methodologies and counter-measures.

More information can be found at http//

European ATM Security Team Ltd
Email:*** Email Verified
Tags:ATM Malware, Atm Fraud, Card skimming, Card Trapping, ATM Explosive Attacks
Industry:Banking, Financial
Location:Edinburgh - Edinburgh - Scotland
Account Email Address Verified     Account Phone Number Verified     Disclaimer     Report Abuse
European ATM Security Team Ltd News
Most Viewed
Daily News

Like PRLog?
Click to Share