Malware in ATMs: Exploring Cyber Threats and Key Characteristics
Publication date: November 3, 2025
ATM malware poses a persistent and evolving threat to financial institutions worldwide, exploiting vulnerabilities in critical devices to enable illicit financial gains. Thorough documentation and analysis of ATM malware is essential for cybersecurity experts, law enforcement, and financial institutions aiming to reinforce their defenses and reduce the risks posed by these attacks. This guide was developed by Auriga’s Cybersecurity Business Unit, a leading software provider for payments and omnichannel banking. It is intended to serve as a comprehensive reference on ATM-specific malware families, covering their characteristics, infection methods, activation procedures, historical context, known variants, and key milestones and events.

































