Feeds

EU urges wise-up to combat rampant ATM crime

Don't stand so close to me

Beginner's guide to SSL certificates

The rise in ATM-related crime has prompted a EU security agency to urge consumers to be more careful about withdrawing money from cash machines.

ENISA (European Network and Information Security Agency) estimates that annual cash machine losses in Europe have increased to around €500m, a 149 per cent increase year-on-year. ENISA blames more sophisticated attacks and fraud alongside the rapid growth in the number of ATMs for the increase.

A paper by ENISA entitled ATM Crime: Overview of the European situation and golden rules on how to avoid it contains tips on choosing which ATMs to use and other precautions.

Many of Europe's 400,000 ATMs (up six per cent since last year) are located in convenience stores, airports and petrol stations where they are at greater risk of tampering than those within banks or shopping malls. The UK, Spain, Germany, France and Italy collectively account for 72 per cent of these ATMs.

Fraudsters obtain card details and PINs using a wide range of tactics ranging from "shoulder surfing" to hardware skimmers. Other tactics include trapping and then retrieving users' cards. More recently the use of malware has been implicated in these scams. During 2008, a total of 10,302 skimming incidents were reported in Europe, ENISA reports.

Cybercrooks are also using phishing tactics to trick gullible marks into handing over PIN details as well as banking information.

Physical attacks have also increased by a third over the last year with tactics ranging from ram raids, rotary saws and even explosives brought into play.

"ATM crime is likely to become even more attractive as the latest generation of ATMs is designed to dispense other services and products such as phone top ups and stamps," said Andrea Pirotti, executive director at ENISA. "The first line of defence against ATM crime is increasing awareness of the risks so that users can take simple precautions such as shielding their PIN when entering it and by keeping alert to any signs of tampering or suspicious activity at an ATM."

The EU information security agency has drawn up a list of common sense rules on using ATM machines designed to offer the "maximum protection with minimum effort". The 15 top tips include advice such as using ATMs inside banks, rather than free-standing machines, selecting machines in well-lit areas, looking for signs of tampering before using a machine and checking bank statements afterwards.

"Information security has, for too long, been focusing on technical solutions to maximise protection," ENISA's Pirotti added. "Most ATM crime is focused on exploiting the human element and card holders must be more aware of the risks they are exposed to and how to prevent fraud occurring.

"We hope this latest report will be the start of an ongoing process to increase awareness and reduce the growing cost of ATM crime."

The full report is available here, as a pdf.®

Protecting users from Firesheep and other Sidejacking attacks with SSL

More from The Register

next story
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
Early result from Scots indyref vote? NAW, Jimmy - it's a SCAM
Anyone claiming to know before tomorrow is telling porkies
Jihadi terrorists DIDN'T encrypt their comms 'cos of Snowden leaks
Intel bods' analysis concludes 'no significant change' after whistle was blown
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
China hacked US Army transport orgs TWENTY TIMES in ONE YEAR
FBI et al knew of nine hacks - but didn't tell TRANSCOM
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Protecting users from Firesheep and other Sidejacking attacks with SSL
Discussing the vulnerabilities inherent in Wi-Fi networks, and how using TLS/SSL for your entire site will assure security.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.