North Korea Hackers Get Cash Fast in Linux Cyber Heists

North Korean-linked actors are using a Linux variant of the FASTCash payment-switch malware to target banks and interbank payment processors by intercepting and modifying ISO 8583 transaction messages (including converting declined transactions to approved withdrawals), enabling unauthorized ATM cash-outs of tens of thousands of lira per transaction; the campaign has expanded from Windows and AIX to Linux, employs ptrace-based process injection, and researchers and CISA recommend stronger card authentication, MAC verification, and endpoint monitoring to detect the technique.