Report: Ready-to-Use Malware for Bitcoin ATMs Found for Sale Online

Tokyo-based security software manufacturer Trend Micro has found Bitcoin automated teller machine malware available for purchase online, according to a blog post published August 7.

In the blog post, Trend Micro cites an advertisement posted by an "Apparently established and respected" user on a darknet forum.

For the price of $25,000, criminals could purchase Bitcoin ATM malware accompanied by a ready-to-use card with EMV and near-field communication capabilities.

The malicious software reportedly exploits a Bitcoin ATM vulnerability, which allows fraudsters to receive the BTC equivalent of up to 6,750 U.S. dollars, euros, or pounds.

According to Trend Micro, the seller has received over 100 online reviews both for the malware and other products.

Another forum thread showed that the seller also offers regular ATM malware that has been updated for EMV standards.

Further research reportedly revealed that the malware exploits a menu vulnerability to disconnect an ATM from the network in order to disable alarms.

"As long as there is money to be made - and there is quite a bit of money in cryptocurrencies - cybercriminals will continue to devise tools and to expand to lucrative new 'markets.' As the number of Bitcoin ATMs grows, we can expect to see more forms of malware targeting cryptocurrency ATMs in the future."

Another recent study conducted by cybersecurity company Duo Security revealed a network of thousands of crypto-related scam bots on Twitter, advertising fake "Giveaways." The project involved 88 million Twitter accounts, with researchers using machine learning techniques to train a bot classifier.

Steam took action following complaints from a number of users who said that the game setup file seemed to include a Trojan virus and malware disguised as steam.