FBI Flash Alert: ATM Jackpotting Surges, $20M Lost in 2025 Alone

• FBI issues flash alert on a sharp increase in malware-enabled ATM jackpotting incidents across the US.
• Over 1,900 incidents reported since 2020, with 700+ in 2025 leading to over $20 million in losses this year.
• Attackers use Ploutus malware to exploit the XFS software layer, bypassing bank authorization to force cash dispensing.
• Criminals gain physical access using generic keys, installing malware by replacing or loading onto hard drives.
• Physical indicators include unexpected door alerts, low cash notifications, and unauthorized devices connected to ATMs.