is a high-tech heist where criminals take physical control of an ATM to force it to "spit out" all its cash. Unlike traditional skimming, which steals your personal data, jackpotting targets the bank's own money directly by manipulating the machine's "brain". The "Grinder and Computer" Technique
In 2022, law enforcement and security firms noted a shift in how these attacks were carried out, often involving a mix of heavy tools and specialized tech:
These aren't solo crimes. Large, international rings often recruit "money mules" to stand at the machine and collect the cash while a remote technician triggers the "jackpot" via a smartphone. Protection and Prevention is a high-tech heist where criminals take physical
Attackers use tools like angle grinders or specialized drills to cut through the ATM’s outer casing. Their goal isn't to break into the safe—which is too difficult—but to reach the internal computer or the USB ports located in the upper service area.
Financial institutions have since moved to "harden" their machines using several methods recommended by the FDIC OIG and FBI : Large, international rings often recruit "money mules" to
Encrypting the internal drive prevents attackers from loading malware even if they reach the computer.
Once they reach the internal electronics, they use a laptop or a "black box" (like a Raspberry Pi) to connect directly to the ATM's cash dispenser. Financial institutions have since moved to "harden" their
Tools like the Ploutus family are often used to override the machine's software. By bypassing bank authorizations, the malware sends a direct command through the XFS (eXtensions for Financial Services) layer—the software that physically tells the machine to move its gears and dispense bills. Why It Surged in 2022