ATM/POS Security Services
ATMs and POS devices are no longer vulnerable only to physical attacks like ATM break-ins or cardskimming. As protection measures applied by banks and ATM/POS vendors evolve, so attacks against
these devices also shift up a gear, becoming ever more sophisticated. Hackers are exploiting vulnerabilities
in ATM/POS infrastructure architecture and applications, and are creating malware specifically tailoredto ATM/POS. ATM/POS Security Assessment services from Kaspersky help you to recognize the security
flaws in your ATM/POS devices, and to mitigate the risk of being compromised.

There is no single solution that offers comprehensive protection. As a business manager,it`s your responsibility to protect your organization against today’s threats, and to anticipate
the dangers that lie ahead in the coming years. This needs more than just smart operational
protection against known threats; it demands a level of strategic security intelligencethat very few companies have the resources to develop in-house.
Security Assessment Services from Kaspersky draws upon the services of our in-house
experts, many of them global authorities in their own right, whose knowledge andexperience is fundamental to our reputation as world leaders in security intelligence.

Kaspersky ATM/POS
Security Assessment

Comprehensive analysis of ATMs and POS
devices, designed to identify vulnerabilities
that can be used by attackers, including:• unauthorized cash withdrawal• performing unauthorized transactions• obtaining your customers payment carddata
• initiating denial of service

Why you should do this

ATM/POS Security Assessment by Kaspersky helps you as a vendor or financialorganization to:• Understand the vulnerabilities in your ATM/POS devices and improve your corresponding
security processes• Avoid the financial, operational and reputational losses that can result from an attack,through proactively detecting and fixing the vulnerabilities which attackers could exploit.
• Comply with government, industry or internal corporate standards, which include
the carrying out of security assessments, e.g. PCI DSS (Payment Card Industry Data
Security Standard).

How do fraudsters attack?

Each ATM machine consists of 4 cassettes
with up to 3,000 banknotes in eachcassette. In the worst case scenario,
criminals could obtain up to USD$255,000.
An ATM cash-out scheme in May
2016 demonstrated that criminals areprepared to coordinate their actions, in thiscase to access 1,400 ATM machines in justa couple of hours. The Taiwan incident inJuly 2016, which involved malicious software
being installed on multiple ATMs, enabled
the criminals to withdraw USD$2,000,000
from twenty ATMs. Criminals are always on
standby to attack ATMs. Don’t be a victim.

Who we are
Our project team members are professionals
highly experienced in practical security,
who have a deep knowledge in the field
and are constantly improving their skills.
They regularly provide security consultancy
to ATM/POS vendors, and present theresults of our ATM/POS security researches
at leading information security conferences,including Black Hat, Hack in Paris, Positive
Hack Days, Security Analyst Summit, Nuit Du
Hack, HITB GSEC, DefCamp, ATMIA events,
Chaos Communication Congress and manyothers.
Follow our experts at www.securelist.com
Get in touch at www.kaspersky.com/
enterprise-security/contact

What we’re testing

The service includes comprehensive ATM/POS analysis including assessment of software
components, hardware devices and network communications. The service can beconducted on a single ATM/POS device or on a network of devices. We recommend
choosing the type of ATMs/POS device in most common use within your organization,or the type that appears most vulnerable (which has, for instance, already suffered fromincidents) for assessment, and for these to be assessed in their typical configurations.

How we do thisDuring analysis, our experts will not just seek out and identify configuration flaws andvulnerabilities in obsolete software versions, but will deeply analyze the logic behind theprocesses performed by your ATMs/POS devices, undertaking security research aimed
at identifying any new (zero-day) vulnerabilities at component level. If we uncovervulnerabilities which could profit an attacker (resulting, for example, in unauthorizedcash withdrawal), our experts can provide demonstrations of possible attack scenarios
using specially crafted automation tools or devices.
While an ATM/POS Security Assessment involves emulating the attack behavior of agenuine hacker in order to practically assess the effectiveness of your defenses, please
note that it is entirely safe and non-invasive.

Threats to the Finance Industry

Banks stock markets, and other financial institutions are an ongoing focus forcybercriminals due to the very nature of the industry. To avoid financial andreputational losses, it’s critical to stay ahead of the curve in terms of cybersecurity.
Kaspersky offers a set of proactive threat intelligence services to help you enhanceyour security operations and take a proactive approach to advanced threats:• Security Assessment Services (Penetration Testing, Application Security
Assessment, ATM and POS Security Assessment)• Threat Intelligence Reports (APT Intelligence Reports, Customer-Specific ThreatIntelligence Reports)• Cyber-Attack Readiness Testing• Botnet Threat Tracking• Threat Data Feeds• Malware Analysis and Digital Forensics• Training: Threat Analysis, Forensics and Investigation
See more at www.kaspersky.com/enterprise

Cyber Threats News: www.securelist.com
IT Security News: business.kaspersky.com
IT Security for SMB: kaspersky.com/business
IT Security for Enterprise: kaspersky.com/enterprisewww.kaspersky.com
2019 AO Kaspersky Lab. All rights reserved.
Registered trademarks and service marks are the propertyof their respective owners.

We are proven. We are independent. We aretransparent. We are committed to building a safer
world, where technology improves our lives. Whichis why we secure it, so everyone everywhere has theendless opportunities it brings. Bring on cybersecurity
for a safer tommorow.
Know more at kaspersky.com/transparency