ATM Jackpotting Losses Cross $20M as Malware Targets U.S. Cash Machines

The FBI warns of a sharp increase in ATM jackpotting linked to the Ploutus malware family, reporting over 1,900 incidents since 2020 (700+ in 2025) and more than $20 million in losses; attackers exploit the XFS software layer and often rely on physical access methods (generic keys, swapped hard drives, USBs) to install malware that commands cash dispensers and bypasses bank authorization. Agencies observed Ploutus variants adapted to multiple ATM vendors, indicators such as unauthorized remote-access tools and suspicious executables, and DOJ indictments tying coordinated schemes to organized crime; recommended mitigations include hardware monitoring, device whitelisting, disk encryption, strict audit logging, and maintaining verified gold images.