Cyber Risks · Krebs on Security

Don’t Get Sucker Pumped

Summary: Two men indicted in Muskogee, Oklahoma, are accused of placing card skimmers and fake PIN pad overlays on gas pumps at Murphy's stations in Wal-Mart parking lots, leaving them in place for one to two months and netting $400,000 before they were caught. Investigators said some of the stolen card data surfaced in fraudulent transactions in Eastern Europe and Russia, and that the skimmer technology was more sophisticated than anything they had seen previously.

Why it matters: The Oklahoma case turned on a $74 card-acceptance part and master keys that open a great many pumps, while re-keying eight pumps costs a station about $450 - a cost decision that leaves the hardware exposed.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related