ATMSpitter (Malware Family)
By Fraunhofer FKIE
Archived: 2026-04-05 17:29:09 UTC
The ATMSpitter family consists of command-line tools designed to control the cash dispenser of an ATM through
function calls to either CSCWCNG.dll or MFSXFS.dll.
Both libraries are legitimate Windows drivers used to interact with the components of different ATM models.
[TLP:WHITE] win_atmspitter_auto (20251219 | Detects win.atmspitter.)
Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.atmspitter
https://malpedia.caad.fkie.fraunhofer.de/details/win.atmspitter
Page 1 of 1