The ATMSpitter family consists of command-line tools designed to control the cash dispenser of an ATM through function calls to either CSCWCNG.dll or MFSXFS.dll.

ATMRIPPER or simply RIPPER is an ATM Malware that is allegedly responsible for theft of 12 million Bhat from Thailand Government Savings Bank's NCR ATMs in 2016.

ATMii targets ATMs running Windows 7 and Windows Vista. ATMii is pretty straightforward, it consists of two modules Control module 'exe.exe' and injecting module 'dll.dll'.

ATMitch is a fileless ATM Malware that targets ATM machines remotely and delete evidence of attack.ATMitch operates by reading commands contained within a local text file labeled command.txt.

Prilex is an interesting ATM malware fully developed by Brazilian cyber criminals. The criminals behind Prilex are also responsible for the development of several PoS malware, allowing them to target both ATM and PoS markets. It is designed specifically to attack Brazilian Bank and is written in Visual Basic 6.0 (VB6)