Cyber Risks · Krebs on Security

Why GSM-Based ATM Skimmers Rule

Summary: A seller of GSM-based ATM skimmers on an exclusive hacker forum described his device's sales pitch to KrebsOnSecurity: the skimmer texts stolen card tracks to the attacker's phone, so a machine working from 9:00 a.m. can yield roughly 25-35 tracks in six hours, worth about 20-25k Euros at cashout in Europe. He said that when police removed his equipment after a full day of surveillance, he still received about 120 tracks with PINs, and argued that Bluetooth skimmers would let police locate the receiving vehicle within 15 minutes.

What's compelling: The seller's core selling point is that stolen tracks are already on his computer before police ever reach the ATM, so losing the hardware costs him nothing - and the same wireless design means the workers who plant the devices never hold the card data or PINs, removing the insider-theft risk that comes with models requiring physical retrieval.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related