Canada: The smallest security researcher we reported here is 14-Years-Old and again the same age students hacked a Bank of Montreal ATM in WINNIPEG and informed the BANK about how they were able to do that.
Two students named Mathew Hewlett and Caleb Turon study in grade 9, they found an old ATM operators manual online that shows how to get into the ATM operator mode.
To demonstrate their practical, they both went to the ATM after their lunch on Wednesday and started to follow up the manual they found.
“We thought it would be fun to try it, but we were not expecting it to work,” Hewlett said. “When it did, it asked for a password.”
Hwelett and Turon tried their first random guess of the six-digit password and that worked :)
They used a common default password to open the operator mode.
After their practical was successfully completed, they went to the BANK and told about the loop hole in the machines.
When they told staff about a security problem with an ATM, they assumed one of their PIN numbers had been stolen, Hewlett said.
“I said, ‘No, no, no. We hacked your ATM. We got into the operator mode’,” Hewlett said. “He said that wasn’t really possible and we don’t have any proof that we did it.
“I asked them, ‘Is it alright for us to get proof?’
“He said, ‘Yeah, sure, but you’ll never be able to get anything out of it.’
“So we both went back to the ATM and I got into the operator mode again. Then I started printing off documentation like how much money is currently in the machine, how many withdrawals have happened that day, how much it’s made off surcharges.”
So this was a hack that done by two small boys suddenly :)