Skip to content
MalwareWiki

Malware

ATMSpitter

The ATMSpitter family consists of command-line tools designed to control the cash dispenser of an ATM through function calls to either CSCWCNG.dll or MFSXFS.dll.

ATMSpitter is a Windows malware family operated by Cobalt.

Background

ATMSpitter is a family of command-line utilities built to operate an ATM's cash dispenser by invoking functions in either CSCWCNG.dll or MFSXFS.dll. Both of these libraries are legitimate Windows drivers that communicate with the hardware of various ATM models.

Source: Malpedia (Fraunhofer FKIE).