North Korea-linked Lazarus Group has been using FastCash Trojan to compromise AIX servers to empty tens of millions of dollars from ATMs. The malware was designed to intercept and approve fraudulent ATM cash withdrawal requests and send fake approval responses. The operation, known as FASTCash, has enabled Lazarus to fraudulently empty ATMs of cash. The group is considered responsible for the massive WannaCry ransomware attack, a string of SWIFTattacks in 2016, and the Sony Pictures hack.”]
Source: https://securityaffairs.co/wordpress/77877/hacking/lazarus-apt-fastcash-trojan.html