Cyber Risks · Krebs on Security

Hidden Cam Above Bluetooth Pump Skimmer

Summary: Las Vegas Police Detective Matt Jogodka reported a hidden pinhole camera installed in a fake panel above a gas pump's "This Sale" display, angled to record debit card users entering their PINs, alongside a Bluetooth-based circuit board wired to the pump's power and card reader that transmits stolen card data wirelessly. Jogodka said the pump's PIN pad was encrypted, so the camera was a new way to capture the PIN; the device was set to motion detection to save memory and battery, and was recovered two hours after installation.

Key Takeaway: The camera defeats encryption that the pump already had, and the Bluetooth board lets thieves download card data from a passing car without ever touching the pump again - so a control you believe is protecting the PIN pad is not the control that matters here.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related