Forest Global Training Partners

Cyber Risks · Krebs on Security

Who’s Behind Bluetooth Skimming in Mexico?

Summary: Krebs on Security reports that an organized crime gang in Mexico has been bribing ATM technicians to install Bluetooth skimming components that capture card and PIN data wirelessly, and examines a new ATM company called Intacash whose roughly 70 machines blanket tourist areas of Cancun, Playa del Carmen and Tulum. Intacash's site has four pages, no contact information, hidden WHOIS records, copied text, and shared GoDaddy hosting, and its ATMs charge 10 to 15 percent per withdrawal while sometimes issuing no receipt and canceling transactions after PIN entry.

Bottom line: A source said his technicians began receiving bribe offers around the time Intacash came online, and several later identified the men with Eastern European accents who approached them through WhatsApp profiles shown to a Cancun hotel manager. Krebs estimates a 70-machine operation could conservatively pull in about $1.5 million per month, and notes that a transaction canceled before reaching the customer's bank switch leaves no record even though the card data and PIN were captured.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related