
A lot of the functions used to extract information were part of the ATMs operation software, but were never documented. After an analysis of the malware, Diebold concluded the attackers also had to have inside information about the systems.

The perpetrators used social engineering, to persuade stores to allow them physical access to the machine after hours, so they could install the virus. The hack required physical access to the machine.

There are some difficulties involved in hacking an ATM: It caught my attention, so I started digging a little deeper into this matter. A few weeks ago, Kyle Rozendo asked a question on the IT Security StackExchange about Cracking a PCI terminal using a trojan based on the card.
