Raspberry Pi Robbers: Cybercriminals Unleash ATM Heist with High-Tech Hijinks
Cybercriminals implanted a Raspberry Pi on a bank’s network, exploiting it to steal cash from an Indonesian ATM. The attack, tracked as UNC2891, involved paying “runners” to install the device. Despite the use of a backdoor and obfuscation tactics, the attack was mitigated, but not before the crooks cashed out.

Hot Take:
Who knew Raspberry Pi would become the ultimate “ATM hacker tool” of the year? Move over, bank heists of the past—digital robbery has gone DIY with a sprinkle of Raspberry Pi. Any bets on how long before an “Ocean’s 11” sequel features a team of hackers armed with 4G modems?
Key Points:
- Cybercriminals physically implanted a Raspberry Pi in an Indonesian bank’s network to execute the heist.
- The cunning heist was orchestrated by threat cluster UNC2891, known for its international flair.
- The Raspberry Pi used a 4G modem to hack remotely into the bank’s network.
- The attackers deployed Tinyshell, a sneaky backdoor, to maintain access and evade detection.
- While they got some cash, the criminals’ ambition to deploy a rootkit called “Caketap” was thwarted.
Already a member? Log in here