Rewterz Threat Alert – FASTCash ISO 8583-Specific Windows Malware Identified

Severity

Medium

Analysis Summary

FASTCash’s capability to manipulate AIX servers running a bank’s switch application to intercept financial request messages and reply with fraudulent but legitimate-looking affirmative response messages to enable extensive ATM cash outs. The newly identified malware provides FASTCash the additional capability to intercept and manipulate financial messages processed on a Windows server. 

Impact

Fraudulent Transactions

Indicators of Compromise

Remediation

• Block threat indicators at your respective control.
• Require two factor authentication for any user to access the switch application server.
• Maintain situational awareness of the latest threats.