North Korean hackers have developed and have been observed using a new malware strain that can be planted on ATM systems and used to record and steal data from payment cards inserted into a machine. Named ATMDtrack, this new malware has been spotted on the networks of Indian banks since late summer 2018. Newer attacks have also targeted Indian research centers with a more potent and expanded version of the same malware, named DTrack, which focuses on spying and data theft, rather than financial crime, and comes with features normally found in remote access trojan (RAT).
Recent DTrack samples can perform the following operations:
Malware Hash (MD5/SHA1/SH256)