The UNC2891 hacking group, also known as LightBasin, used a 4G-equipped Raspberry Pi hidden in a bank's network to bypass security defenses in a newly discovered attack.

The UNC2891 hacking group, also known as LightBasin, used a 4G-equipped Raspberry Pi hidden in a bank's network to bypass security defenses in a newly discovered attack. [...]

TLDR is the free daily newsletter with the most interesting stories in startups, tech and programming!

ハッキンググループUNC2891（LightBasin）による、銀行ATMからの不正な現金引き出しを目的とした攻撃についてGroup-IBが報告。実際の被害が出る前に阻止されたこの攻撃では、銀行のネットワーク上に4G搭載のRaspberry Piを設置するという珍しい初期アクセス獲得手段が用いられていたという。

לפרסום בערוץ ויצירת קשר: @ErezD

The UNC2891 hacking group, also known as LightBasin, used a 4G-equipped Raspberry Pi hidden in a bank's network to bypass security defenses in a newly discovered attack.

The UNC2891 hacking group, also known as LightBasin, used a 4G-equipped Raspberry Pi hidden in a bank's network to bypass security defenses in a newly discovered attack.

The UNC2891 hacking group, also known as LightBasin, used a 4G-equipped Raspberry Pi hidden in a bank's network to bypass security defenses in a newly discovered attack.

A $35 Raspberry Pi was used in an attempted ATM heist by the UNC2891 group (LightBasin). They installed a 4G-enabled device with custom malware to remotely control ATMs. This failed heist highlights the risk of low-cost tech in cybercrime. Banks must update security! Stay vigilant! Published 2025-08-01. Tools used for generation Text Gemini Narator Azure TTS Clips Pexel Rendering Remotion

T-Mobile was hit by Salt Typhoon, a Chinese cyber-espionage group targeting US and global telecom firms

The UNC2891 hacking group, also known as LightBasin, used a 4G-equipped Raspberry Pi hidden in a bank's network to bypass security defenses in a newly discovered attack.

Learn about recent LightBasin intrusion activities and why CrowdStrike Intelligence assesses that LightBasin will continue to target the telecommunications sector.

The UNC2891 hacking group, also known as LightBasin, used a 4G-equipped Raspberry Pi hidden in a bank's network to bypass security defenses in a newly discovered attack.

The UNC2891 hacking group, also known as LightBasin, used a 4G-equipped Raspberry Pi hidden in a bank's network to bypass security defenses in a newly discovered attack. [...]

Inside the Bank with a Raspberry Pi: A Bold Cyber-Heist Foiled A notorious cybercriminal group known as UNC2891, or LightBasin, has once again made headlines after launching a sophisticated attack on a financial institution using a physical Raspberry Pi device equipped with 4G connectivity. In a shocking blend of physical and digital intrusion, the attackers managed to slip past layers of security by connecting the device directly into the ATM network switch.

Read more

The UNC2891 hacking group, also known as LightBasin, used a 4G-equipped Raspberry Pi hidden in a bank's network to bypass security defenses in a newly discovered attack. The single-board computer was ...

CrowdStrike unveiled a new Chinese-aligned hacking group allegedly spying on telecom providers

The UNC2891 hacking group, also known as LightBasin, used a 4G-equipped Raspberry Pi hidden in a bank's network to bypass security defenses in a newly discovered attack.

The hacking group UNC2891, also known as LightBasin, has demonstrated a sophisticated attack method by utilizing a Raspberry Pi with 4G support to infiltrate a bank's network. The device was connected to the same network switch as an ATM, providing the attackers with a direct pathway into the bank's internal network. This approach allowed the hackers to move laterally within the network and install backdoors, facilitating persistent access and potential data exfiltration. The attack vector underscores the critical importance of physical security and network segmentation in protecting sensitive financial infrastructure. LightBasin's use of a common and innocuous device like a Raspberry Pi highlights the evolving tactics of cybercriminals, who increasingly leverage affordable and readily available hardware to execute their attacks. This incident serves as a stark reminder for financial institutions to enforce strict access controls, monitor network devices rigorously, and ensure that ATMs and other peripheral devices are isolated from critical internal systems. The implications for the cybersecurity landscape are significant, as this attack method could be replicated across various sectors, emphasizing the need for comprehensive security strategies that address both digital and physical vulnerabilities.