Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 21:07:34 UTC
Home > List all groups > List all tools > List all groups using tool GreenDispenser
 Tool: GreenDispenser
Names GreenDispenser
Category Malware
Type ATM malware
Description
(Proofpoint) GreenDispenser provides an attacker the ability to walk up to an infected
ATM and drain its cash vault. When installed, GreenDispenser may display an ‘out of
service’ message on the ATM -- but attackers who enter the correct pin codes can then
drain the ATM’s cash vault and erase GreenDispenser using a deep delete process, leaving
little if any trace of how the ATM was robbed.
Information
<https://www.proofpoint.com/us/threat-insight/post/Meet-GreenDispenser>
<https://documents.trendmicro.com/assets/white_papers/wp-cashing-in-on-atm-malware.pdf>
Malpedia <https://malpedia.caad.fkie.fraunhofer.de/details/win.green_dispenser>
AlienVault OTX <https://otx.alienvault.com/browse/pulses?q=tag:greendispenser>
Last change to this tool card: 27 December 2024
Download this tool card in JSON format
All groups using tool GreenDispenser
Changed Name Country Observed
Unknown groups
  _[ Interesting malware not linked to an actor yet ]_  
1 group listed (0 APT, 0 other, 1 unknown)
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=352b94fa-78c4-4133-b455-b7d81c079a7e
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=352b94fa-78c4-4133-b455-b7d81c079a7e
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=352b94fa-78c4-4133-b455-b7d81c079a7e
Page 2 of 2

Unknown groups _[ Interesting malware not linked to an actor yet ]_
1 group listed (0 APT, 0 other, 1 unknown) 
   Page 1 of 2