Cyber Risks · Krebs on Security

New Breed of Fuel Pump Skimmer? Not Really

Summary: KrebsOnSecurity retracted its earlier report that a circular device found on a gas pump was a text-messaging card skimmer, after a security employee at the station's owner showed the device was a $100-$150 GPS tracker likely left behind by someone being tracked. The station did have multiple pumps internally compromised with Bluetooth skimming devices, and the original story had cited a U.S. Secret Service alert and ControlScan, the company that found the device and alerted authorities.

What you should know: The correction matters because the original claim - a skimmer relaying stolen card data by SMS - was attributed to a Secret Service memo and a payment-security vendor, and it took a reader inside the station's ownership to disprove it. Meanwhile the Bluetooth skimmers inside the pumps were real, and Krebs notes detection apps catch only one module type (HC-05) out of at least four in use.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related