Automated Tear Machines: The Reality of ATM Hacking
Meadow Ellis demystifies ATM security architecture, explaining internal components, cash dispenser controllers, and why legitimate ATM research is so difficult.
Summary
The Anatomy of Modern Automated Teller Machines
Automated Teller Machines (ATMs) combine industrial embedded hardware, specialized cash dispensing mechanisms, and legacy operating systems into high-value street-level physical targets.
Deconstructing ATM Modules and Internal Buses
Meadow Ellis breaks down core ATM subsystems—including cash dispensers, encrypted PIN pads (EPP), card readers, and CEN/XFS software middleware.
Analyzing Physical and Logical Attack Vectors
Ellis reviews common threat models—ranging from physical black-box jackpotting and skimming to software malware injection and transaction hijacking.
The Barriers to Independent ATM Security Research
The author discusses the severe legal, regulatory, and cost hurdles facing researchers attempting to acquire and safely audit ATM hardware.
Related talks
Main Stage·42 min
Mark Omo · James Rowley
Reverse engineers electronic gun safes and commercial digital vaults, demonstrating effortless physical and electromagnetic bypasses across leading brands.
Main Stage·39 min
Matt Burch
Analysis and proof-of-concept exploitation of six zero-day vulnerabilities in Diebold Nixdorf Vynamic Security Suite ATM disk encryption.
Main Stage·40 min
Dennis Giese · braelynn
Security evaluation and hardware attack surface analysis of smart electronic lockers and storage cabinets.