FBI: $20 Million Losses Caused by 700 ATM Jackpotting Attacks in 2025

Summary

The FBI has confirmed that the Ploutus malware is still being used in the wild to conduct ATM jackpotting attacks. These attacks have resulted in $20 million in losses from 700 incidents in 2025.

IFF Assessment

FOE

Active malware campaigns that cause significant financial loss are bad news for defenders.

Defender Context

Defenders need to ensure their ATM systems are patched against known Ploutus vulnerabilities and have robust endpoint detection and response (EDR) solutions in place to detect and prevent malware execution. Monitoring ATM activity for unusual transactions or system modifications is crucial. ATM jackpotting attacks remain a persistent threat due to the potential for high financial gain.

Read Full Story →