Rock the Cash Box: Reverse Engineering Hyosung ATMs & Becoming a Rogue Payment Processor
Spicy Wasabi shares the physical and network reverse engineering journey of hacking real Hyosung ATMs, emulating host payment processors, and commanding cash dispensers.
Summary
The Physical and Network Architecture of Retail ATMs
Retail and convenience store automated teller machines (ATMs) rely on standalone embedded controllers, dial-up modems, and network connections to communicate with upstream transaction processing networks.
Hardware Teardown and Console Access on Hyosung ATMs
Spicy Wasabi details acquiring real Hyosung ATMs, exploring internal serial console ports, diagnostic menus, and physical motherboard interfaces without existing vendor documentation.
Emulating Payment Host Processors and Intercepting Transactions
The author demonstrates establishing custom dial-in modems and TCP socket listeners to emulate financial host processing protocols and send dispensing commands.
Lessons in Hardware Security and Cash Machine Hardening
The presentation discusses physical security controls, encrypted communication standards, and integrity verification needed to protect modern ATM hardware.
Related talks
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Car Hacking Village·26 min
collin · oblivion
Reverse engineers a commercial odometer rollback tool, extracting locked STM32 firmware and showing how CAN messages are intercepted and rewritten.
Creator Stage·21 min
Craig Heffner
Breaks down practical software and hardware techniques for decrypting obfuscated and encrypted IoT firmware without requiring advanced cryptography math.