Group-IB: Hackers have been draining ATMs of cash across Europe after compromising banks’ networks and planting malicious software on the machines. The attacks do not involve any physical interventions with an ATM itself, but rather software modifications made after a bank’s network is compromised. The gang, nicknamed Cobalt after a software tool it employs, uses hacking techniques that are strikingly similar to another group called Buhtrap. ATMs are expensive to upgrade and replace, and more than 90 percent of those deployed around the world still run Windows XP.”]
Source: https://www.cuinfosecurity.com/report-european-banks-struck-by-atm-jackpotting-attacks-a-9556