Security BSides Las Vegas 2025

Fredrik Sandström

Fredrik Sandström, M.Sc. is Head of Cyber Security at Basalt, based in Stockholm, Sweden. He has nearly a decade of experience in penetration testing, alongside a background in software development and embedded systems engineering. His early work includes software development for organizations such as the Swedish Defence Research Agency (FOI).

Since 2015, Fredrik has focused on delivering advanced security assessments—including penetration testing, red teaming, and threat emulation—for clients in diverse sectors such as banking, insurance, automotive, energy, communications, and IT services. He holds multiple industry-recognized certifications, including GXPN (GIAC Exploit Researcher and Advanced Penetration Tester), GCPN (GIAC Cloud Penetration Tester), GRTP (GIAC Red Team Professional), and HTB Certified Bug Bounty Hunter (CBBH).

Fredrik is also an active contributor to the security community. He has presented at major conferences such as SEC-T—Sweden’s leading offensive security conference—and DevCon in Bucharest, Romania, a key event for developers and IT professionals in Eastern Europe.


Session

08-05
18:00
25min
Take all my money – penetrating ATMs
Jonathan Fischer, Fredrik Sandström

Who needs money to grow on trees when you can make it rain out of an ATM! If this sounds like something that you would be interested in, this talk is for you!
In this talk you will hear career war stories from an ATM pentester. Other topics that will be covered include technical aspects of ATM hacking, common tools used, as well as troubles that can arise when trying to set up an ATM test.
Attendees will leave with a better understanding of the composition of an ATM, a basic methodology to approach ATM penetration testing with, and some crazy stories that will be shared with anyone that will listen.

Proving Ground
Firenze