General Bytes Cryptocurrency ATM Network Under Attack

Halborn, a blockchain security agency, stated that the General Bytes cryptocurrency ATM network was previously hacked. The attackers exploited a zero-day vulnerability in the ATM encryption application server (CAS) management interface, and found that the public server running on port 7777 or 443 Once the CAS is in service, an attacker could exploit the vulnerability to gain administrator access to the ATM and create a new administrator account. Afterwards, the attacker added his own address to the "Invalid Payment Address" setting, and invalid payments sent to General Bytes Bitcoin ATMs were redirected to the attacker's account.