ATM attack: theft or fraud?