UNC2891 Hackers Use Raspberry Pi and Fake Cards to Steal ATM Cash

Gbhackers •Divya • November 21, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

UNC2891 Hackers Use Cloned Cards and Raspberry Pi to Steal Cash from ATMs Hackers identified as UNC2891 have been using cloned cards and Raspberry Pi devices to illegally withdraw cash from ATMs. Recent analysis from Group-IB indicates that this operation has compromised dozens of ATMs, highlighting the sophisticated methods employed in this cybercrime. The attacks involve hardware tampering and the use of counterfeit cards to facilitate the theft. 2 sources 24

UNC2891 Hackers Use Raspberry Pi and Fake Cards to Steal ATM Cash

The full story

Extracted Entities

APT Groups (1)

Tools (1)