who cares, but Nachi worm enters Diebold XP ATM machines

[buycitgo]

who cares.

Harry Shearer just talked about this on his most valuable :Le Show:

http://www.securityfocus.com/news/7517

this is for you, Bev, but I guess you already know.

is this old news?

The Nachi worm compromised Windows-based automated teller machines at two financial institutions last August, according to ATM-maker Diebold, in the first confirmed case of malicious code penetrating cash machines.

The machines were in an advanced line of Diebold ATMs built atop Windows XP Embedded, which, like most versions of Windows, was vulnerable to the RPC DCOM security bug exploited by Nachi, and its more famous forebear, Blaster.

At both affected institutions the ATMs began aggressively scanning for other vulnerable machines, generating anomalous waves of network traffic that tripped the banks' intrusion detection systems, resulting in the infected machines being automatically cut off, Diebold executives said.

"The outbound traffic from the ATM was stopped -- limited, from a network standpoint -- and effectively isolated," said Nick Billett, Diebold's director of software engineering. "In many cases, the machines were cleaned up that day."

A patch for the critical RPC DCOM hole had been available from Microsoft for over a month at the time of the attack, but Diebold had neglected to install it in the infected machines. Billett defended the company's patching process, which he said involves testing each new bug fix, and deploying at a wide variety of institutions with a mix of network architectures. "A lot of those machines actually have to be visited by a service technician" to be patched, said Billett. "Our experience in the past is we are able to turn those around in one or two days."

jesus pope

[frylock]

1. project mayhem, perhaps?

punt.

[buycitgo]

2. uhh whuhhhh?

can you expand on that for those of us who know only that Diebold should never be allowed within projectile vomiting distance of any polling place?

have to sleep....no time for googling

thanks.

again, is this old?

Harry Shearer is usually on/in the vanguard of the electron stream