Cyber Risks · Krebs on Security

Thieves Used Infrared to Pull Data from ATM ‘Insert Skimmers’

Summary: Insert skimmers recovered from ATMs in the Oklahoma City area in June 2017 were configured to send stolen card data by infrared to a hidden camera, according to preliminary analysis cited by financial industry sources. The camera serves two purposes: recording time-stamped video of PIN entries and receiving the card data, so the fraudster can leave the skimmer in the card slot and swap out the camera when its battery runs down.

What you should know: The skimmer was built to power on only when someone uses the machine, and infrared leaves no Wi-Fi signal for anyone to detect, so the device can sit in the card slot unnoticed until fraudulent card activity surfaces. At least four banks in the Oklahoma City area were hit in the June 2017 incidents.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related