Uploaded January 2024 | Updated September 2026, 1 week ago

---

Supporting clip from the IOActive 'Owning a Bitcoin ATM' research by Gabriel Gonzalez, Antonio Requena, Sergio Ruiz. labs.ioactive.com/2024/01/atm-security-owning-bitcoin-atm.html

0:00 – 0:14 ATM is booting, waiting for the UI to com up.
0:14 – 0:22 Brief glitch on the window manager
0:22 – 1:00 We can leverage this glitch to quickly open the menu, execute applications and explore files
1:00 – 2:00 Looking for the QR Reader application that will be used to deliver the payload
2:00 – 2:30 The QR on the phone contains the exploit to elevate privileges
2:30 – end We copy the contents of the QR onto a different terminal and Pwned!