Cyber Risks · Krebs on Security

Postal Service: Beware Stamp Kiosk Skimmers

Summary: The U.S. Postal Inspection Service has an open investigation into skimming devices reportedly installed on Automated Postal Center stamp kiosks at Post Offices, with banking sources tracing fraudulent debit card activity to machines in at least 13 states and the District of Columbia. Banking sources said the fraud began in late November 2013 and follows a consistent pattern: thieves steal debit card PINs, fabricate new cards, and withdraw $500 to $800 per card at ATMs.

Key Takeaway: The kiosks appear to be custom-made by Wincor-Nixdorf, so skimming devices already sold in the cybercrime underground for Wincor ATMs may work on them as well - and the machines often sit in 24x7 lobbies where few people pass at night.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related