Cyber Risks · Krebs on Security

ATM Skimmer Powered by MP3 Player

Summary: A card skimmer designed to fit the card slot of a Diebold Opteva 760 uses a circuit board taken from an MP3 player to record magnetic-stripe data as an audio file to embedded flash memory, and ships with a false top panel holding a miniature camera that records victims entering their PIN, with a battery the seller says lasts six hours. The kit costs $1,500 payable via virtual currencies such as WebMoney and Liberty Reserve, and the seller advertises easy installation in 10-15 seconds and full support after purchase, but the recorded audio files are encrypted and require a separate decryption service from another fraudster who takes 20 percent of the stolen card numbers and PINs.

What you should know: The $1,500 sticker price does not buy working stolen card data: the seller's encrypted audio files only become usable through a partner who takes a 20 percent cut of every card number and PIN, so the criminal supply chain is built on a service contract rather than a one-time device sale.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related