ATM Malware Gang Slowly Dismantled by British Police

October 6, 2016

London Police is slowly dismantling an ATM malware gang operating out of Romania, which authorities say is responsible for stealing £1.6 million ($2 million) from UK cash machines.

The gang’s biggest heist, which also drew the attention of UK authorities, took place over the 2014 May Bank Holiday weekend when the gang stole £1.3 million ($1.65 million).

The group hit 51 ATMs across Bognor Regis, Brighton, Liverpool, London, and Portsmouth.

Group stole money using ATM malware

The gang operated by infecting the cash machines with malware that allowed them to withdraw large sums of money. Police say the malware had a particular feature that allowed it to delete itself to hide its tracks.

The group scouted ATMs in advance to discover improperly-protected cash machines that they could break in and infect with their malware.

Police got lucky when the group was careless, and one member was recorded by a hidden ATM surveillance camera.

Three out of five group members arrested

The suspect was identified and arrested in late 2014. In February 2015, a UK judge sentenced the suspect, Grigore Paladi, a Romanian national, to five years in prison.

Paladi’s arrest and sentencing were followed by the arrest of Teofil Bortos, 36, also from Romania. Police arrested Bortos at the London Luton Airport in July 2015.

Bortos pleaded guilty in December 2015 and was sentenced to seven years in prison a month later. Authorities said Bortos was the gang member tasked with identifying insecure ATMs the group could attack.

Two suspects remain at large in Romania

Arrests in the 2014 ATM robbery incidents continued on September 20, 2016, when Romania police arrested an unnamed man, aged 30, from the city of Bacau, in eastern Romania.

Local authorities arrested the suspect based on a European arrest warrant issued by UK police. The suspect is scheduled for extradition to the UK next week.

British authorities said the gang has five members, with the other two members still at large in Romania. European arrest warrants have been issued in their names.

Read full story…