HSBC&L

Persistent bypass of Nautilus Hyosung's ATM security measures.

Everyday ATM security

CLIENT

Internal R&D

YEAR

2019

In 2019 we released disclosures and demonstrated remote manipulation of ATM peripherals using Nautilus Hyosung MoniPlus CE Extensions including triggering dispensing of cash. Additionally in 2019 we disclosed and demonstrated arbitrary code execution on ATM’s via the remote management service without the need for credentials.