FBI Alerts on Rise in ATM Jackpotting Attacks

The Federal Bureau of Investigation issued a cybersecurity alert on Thursday warning of a sharp increase in ATM jackpotting attacks across the United States, with more than 700 incidents reported in 2025 alone resulting in losses exceeding 20 million dollars.

Jackpotting involves criminals using a combination of physical access and malware to force automated teller machines to dispense cash without any legitimate transaction. According to the FBI, threat actors exploit vulnerabilities in ATM hardware and software by gaining physical entry to the machines, often with generic keys to unlock maintenance cabinets. They then remove or replace the storage drive to install malicious software, rebooting the device to activate the payload. This allows the ATM to eject currency directly from its dispenser, bypassing normal authorization processes.

A primary tool in these attacks is the Ploutus malware, which has been in use for over a decade. Once installed, Ploutus provides attackers with direct control over the machine. "Ploutus attacks the ATM itself rather than customer accounts, enabling fast cashout operations that can occur in minutes and are often difficult to detect until after...