cyber.hendryadrian.com
Security News · theregister.com

FBI Says ATM Jackpotting Stole More Than $20 Million in 2025

· Original article ↗

Summary

The FBI says ATM jackpotting stole more than $20 million in 2025, with over 1,900 incidents reported since 2020, including 700+ in 2025. Its alert describes Ploutus abuse of the XFS API and digital and physical warning signs.

Key points

  • ATM jackpotting uses malware to make ATMs dispense cash without bank authorization.
  • The FBI reports more than 1,900 incidents since 2020, including over 700 in 2025; more than $20 million was stolen last year.
  • Attackers reportedly use generic keys to access ATM casings, then infect or replace the machines’ hard drives.
  • Ploutus abuses the XFS API to send cash-dispense commands that bypass bank authorization.
  • The FBI alert lists Windows executables and files, along with physical signs such as unauthorized USB devices and removed hard drives.

Article Details

Event Type
ATM jackpotting thefts using malware to make compromised ATMs dispense cash without bank authorization.
Impact
More than $20 million was stolen from compromised ATMs last year. The FBI reported more than 1,900 incidents since 2020, including over 700 in 2025. The article says these attacks cause losses to financial institutions and do not hurt banking customers.

Malware

PloutusThe FBI warns of more than 1,900 incidents since 2020 (700+ in 2025), noting Ploutus exploits the XFS API and listing digital and physical indicators for detection.

Products

Windows OSIn its Thursday alert, the FBI lists several digital indicators of compromise on ATMs running Windows OS, so give those a read as they include multiple executables along with associated files and scripts.

Countries

United StatesThieves stole more than $20 million from compromised ATMs last year using a malware-assisted technique that the FBI says is on the uptick across the United States.

Industries

Financial ServicesPloutus malware, which is commonly used in these attacks, exploits eXtensions for Financial Services (XFS), an open-standard API that ATMs, POS terminals, and similar devices that run banking applications use.