The Ploutus ATM malware family, first detected in 2013 by Symantec as Backdoor.Ploutus, allows attackers to withdraw cash from an ATM machine on command.

CNH Ransomware encrypts user data and ask user to email him at helper.china@aol.com for ransom amount. CNH Ransomware or ChinaHelper Ransomware is written in Rust, an unsual language for this task.

Skimmer malware family was the first to target devices throughout the world. The malicious program is implemented as a dynamic link library loaded by an infected application.

Ligsterac ATM Malware Samples.

Lucy ransomware encrypts data on mobile devices using AES and then demands a $200 ransom via OneVanilla card to decrypt the files. It is designed for Android devices only.