HACKERS PLANT 4G RASPBERRY PI ON BANK NETWORK IN FAILED ATM HEIST

Summary from the TLDR InfoSec newsletter

The UNC2891 hacking group (LightBasin) physically planted a 4G-equipped Raspberry Pi on a bank's ATM network switch to create covert remote access into the internal network. The attackers used this device as a pivot point to move laterally through the bank's systems, deploying backdoors and attempting to install their Caketap rootkit to spoof ATM authorization and steal cash. The heist ultimately failed, but demonstrated advanced anti-forensics techniques, including filesystem mounting to hide malicious processes from security tools.