EAST has just published a European Payment Terminal Crime Report covering H1 2025 which highlights an increase in data relay attacks.
Terminal related fraud attacks were up 25% (from 5,913 to 7,398 incidents). This increase was primarily due a rise in data relay attacks. Data relay attacks increased by 1,500% (from 159 to 2,586 incidents), card trapping attacks decreased by 59% (from 2,030 to 826 incidents), cash trapping attacks increased by 11% (from 3,586 to 3,968 incidents), and TRF attacks increased by 5% (from 55 to 58 incidents). Total losses of €1 million were reported, down 99% from the €68 million reported in H1 2024. Given the low level of skimming attacks in Europe, EAST has stopped reporting losses due to card skimming, which reflects the 99% decrease in reported losses.
EAST Executive Director Lachlan Gunn said,“EAST has been carefully monitoring data relay attacks since they first appeared in Europe in 2022. Initially all such attacks seen were ‘Terminal-to-Terminal’, and in this report, we also saw data on ‘Card-to-Terminal’ attacks for the first time. Within the data relay attack total 810 attacks were ‘Terminal-to-Terminal’ and 1,736 were ‘Card-to-Terminal’ attacks. Two of our Expert Groups, EAST EGAF (‘Terminal-to-Terminal’) and EAST EPTF (‘Card-to-Terminal’), continue to monitor and analyse these attacks, with close cooperation between industry partners and law enforcement in the affected countries.”
ATM malware and logical attacks were down 100% (from 3 to zero). No losses were reported. Europol, supported by EAST EGAF, has published guidelines to help the industry and law enforcement counter the ATM Logical Attack threat. It is believed that the adoption by the industry of the recommendations has helped to drive down attacks. Given the low levels of such attacks in Europe, from 2026 onwards it is likely that EAST will stop reporting on them..
ATM related physical attacks were down 74% (from 2,323 to 613 incidents), primarily due to a fall in reported non-specific attacks. Within this total, ATM explosive attacks (including explosive gas and solid explosive attacks) were up 2% (from 298 to 305 incidents), attacks due to ATM Theft (Rip-out)/ATM burglary (In-situ) were down 8% (from 255 to 235 incidents) and non-specific attacks were down 96% (from 1,767 to 68 incidents). Losses due to ATM related physical attacks were €10.4 million, a 73% increase from the €6 million reported during H1 2024. 73% of these losses were due to explosive attacks, which were up 100% from €3.8 million to €7.6 million. While on average around 40% of such attacks do not result in cash loss, the loss figures shown do not take into account collateral damage to equipment or buildings, which can be significant and often exceeds the value of the cash lost in successful attacks.
Δεν υπάρχουν σχόλια:
Δημοσίευση σχολίου
Επικοινωνία