Truly Cardless - Jackpotting an ATM Using Auxiliary Devices

Explore the evolving security landscape of ATMs and the rise of cardless transactions in this 35-minute conference talk. Delve into how the pursuit of improved customer experience has inadvertently created new opportunities for criminals. Examine the progression of ATM technology from early radiocarbon paper cheque systems to modern cardless solutions using smartphones and QR codes. Investigate how these advancements, while convenient for legitimate users, have also simplified ATM jackpotting for attackers. Learn about emerging attack vectors exploiting auxiliary devices, PowerShell availability on Windows 7/10 ATMs, and BadBarcode-like techniques. Gain insights into how seemingly benign customer experience enhancements can potentially lead to complete cash ejection from ATMs.