Jackpotting Surge Costs Banks Over $20m, Warns FBI

The FBI alerted that over 700 ATM jackpotting attacks in 2025 (losses >$20M) used Ploutus variants to exploit the XFS API and directly control ATMs—typically after physical access to install or replace drives with malware—enabling rapid cash-outs that often bypass bank-side detection; recommended mitigations include improved physical and hardware security, logging and auditing, endpoint protection, IP whitelisting, and threat intelligence sharing.