Cyber Risks · Krebs on Security

Point-of-Sale Skimmers: No Charge…Yet

Summary: A top vendor on an active Underweb fraud forum sells pre-hacked wireless Verifone POS devices - the vx670 for $2,900 plus shipping and the vx510 for $2,500 - that print "transaction approved" receipts while offline and store card data and PIN in memory for retrieval via USB. The seller, who pays $5,000 annually for "verified" forum status and recoups it with two sales, markets the devices for use by seasonal or temporary workers in restaurants, bars and retail, and also sells ATM skimmers built around a disassembled MP3 player that records magnetic-stripe data as an audio file.

What's compelling: A $2,500 terminal that prints an approval receipt while capturing the card data and PIN turns a temporary restaurant or retail job into a card-skimming position, and the customer has no way to tell the charge never went through.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related