Cobalt ATM jack potting: Real cases and Q&A

Group-IB was the first to detect their activities, and we still see them active after targeting Financial Institutions in over 14 countries thus far. The roots of this group are Russian-speaking, and we first observed their activity in the former Soviet Union.

Topics covered:

• The techniques and tools used to go from patient zero to ATM control systems
• Instruments, tactics, and software used by Cobalt
• Recommendations on how to prevent these attacks at the implementation stage