Cyber Risks · Krebs on Security

Sophisticated ATM Skimmer Transmits Stolen Data Via Text Message

Summary: A skimmer maker selling on a protected online fraud forum offers a made-to-order ATM skimming kit for $7,000 to $8,000 that pairs a razor-thin card reader with a fake PIN pad overlay containing a GSM module. The module collects the skimmed card data by radio, bundles it with the captured PIN, and sends it as an encrypted text message - typically two to four messages per dump and PIN combination - so the thief never has to return to the ATM.

What you should know: The seller requests photos of the customer's targeted ATMs before a sale and designs around widely deployed models such as the NCR 5886, so the risk is concentrated on the machines you already run. A device that texts stolen card and PIN data from anywhere with cell signal removes the retrieval trip that cameras and branch staff were relied on to catch.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related