Feeds

Teensy card skimmers found in gullets of ATMs

Hi-tech fraudsters treading more softly, but gas still yielding bang for buck

New hybrid storage solutions

A series of tiny and sometimes transparent card-skimming devices have been detected in ATMs across Europe, researchers say.

Boffins with the European ATM Security Team (EAST) have plucked out and displayed some clever thumb-sized skimmers that hide from victims' view by fitting in cash terminals' gullets.

The devices paraded in the EAST report European Fraud Update for 2014 (subscription required) were designed for NCR machines and contained pinhole spy cameras which together with the skimmer would provide felons with the magnetic stripe data and PINs required to replicate the cards.

One of the internal skimmers ditched the typical green fascade opting for a translucent colour, making it more difficult to spot.

Developers of ATM skimmers were at times ingenious in their bid to evade detection. KrebsonSecurity reported one style of skimmer that used audio waves to transmit captured card details which could then be decoded.

Use of mobile communications capabilities is also becoming more popular with skimmers, as it liberates fraudsters from the need to return to hijacked ATMs in order to retrieve fleeced cards or the data they bear.

Cruder cash claws, or cash trapping, still remained popular with thieves who inserted the devices to jam cash dispensers so that money can be picked up later.

The report reflected findings gathered at a meeting at the European Cybercrime Centre (EC3) in the Hague last month. The mini-skimmers were reported in one unnamed European country while others said skimmers were being left in ATMs for longer, between four to five days on average.

Chip and PIN credit cards were deployed in most G20 countries including Australia and the UK which made skimming more complex and expensive for fraudsters. However ATMs still supported outdated and vulnerable magnetic stripe reader cards due to slow adoption in the US where losses were highest, according to the report.

Eight countries reported attacks against unattended payment terminals at petrol stations and six had attacks targeting point-of-sale devices. Fraudsters had even removed ATMs returning it only after modifying the machine.

Brutish ram raids and ATM burglary were down in 10 countries with three large gangs busted by law enforcement. Explosive attacks however were on the rise with eight countries reporting the use of gas attacks and two having cash machines blown up with solid explosives.

The EC3 played a role in four large cross-border busts on criminal fraud gangs targeting online transactions, airlines, ATMs and document fraud. "In many cases the criminals transferred stolen funds to unregistered pre-paid cards for cash withdrawal at ATMs," the organisation said. ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
Leak of '5 MEELLLION Gmail passwords' creates security flap
You should be OK if you're not using ANCIENT password
Google recommends pronounceable passwords
Super Chrome goes into battle with Mr Mxyzptlk
Reddit wipes clean leaked celeb nudie pics, tells users to zip it
Now we've had all THAT TRAFFIC, we 'deplore' this theft
Enigmail PGP plugin forgets to encrypt mail sent as blind copies
User now 'waiting for the bad guys come and get me with their water-boards'
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.