Share

Related Stories

  • Researcher to unveil ATM rootkit
    A researcher originally blocked from giving a talk about security in ATMs will go ahead and make his presentation at the Black Hat USA conference this year.
  • FBI thwarts ATM hacking attempt
    A North Carolina man has been accused of trying to hack into an automated teller machine and change its password, according to a complaint filed by the FBI.
  • ATM skimming sentenced
    Romanian fraudster Tibenu Szebeni has been given 27 months in prison and made to pay back $52 000 in ill-gotten gains after being convicted of ATM skimming.
  • ATM malware likely to spread
    The malware that has been infecting automated teller machines in eastern Europe could be about to spread to other places in the world, according to the company that uncovered the fraud. Experts at SpiderLab, the research arm of security firm Trustwave, say that there is "increased activity" around this particular strain of malware in other parts of the world.
  • German security wire warns of SMS-enabled ATM card skimmers
    Next time you come across a 'different' looking ATM that may – or may not – have a card skimming device attached, it's probably not worth looking around for furtive-looking data thieves, as they may be sitting comfortably at home while using a text message-enabled receiving device.

Top 5 Stories

News

German security wire warns of SMS-enabled ATM card skimmers

08 June 2010

Next time you come across a 'different' looking ATM that may – or may not – have a card skimming device attached, it's probably not worth looking around for furtive-looking data thieves, as they may be sitting comfortably at home while using a text message-enabled receiving device.

While Infosecurity notes that the obvious advice is to walk on to the next cash machine if you encounter something suspicious – waiting until you have left the vicinity to call the police – the Heise Online newswire reports that the latest crop of ATM card skimming devices are piping stolen card data and PINs via SMS text messaging.

According to the German security wire, the skimming devices "copy the magnetic strip of cash point and credit cards at the card slot and spy on PINs via keyboard attachments or mini cameras."

"The new generation of skimming devices no longer store the data over a period of time for later collection, but transmit it via SMS direct to the criminals, allowing them to clone card details from the comfort of their own living room", says the newswire.

As a result of the requirement to only visit the ATM once to plant the skimming device, H-Online says the risk of getting caught is significantly reduced.

This new method of skimming isn't entirely new, says the newswire, "as some skimming devices have transmitted their data via short-distance radio for quite a while. However, with a radio link the criminals need to keep their receivers within range of the device."

Security researcher Brian Krebs has been running a series of reports on ATM frauds in recent months and has noted that it is now possible to 'rent' the latest skimmers from fraudsters.

Some of the latest ATM skimmers, says Krebs, even include an alarm that triggers if they are removed by anyone other than the criminal.

This article is featured in:
Application Security • Identity and Access Management

 

Comment on this article

You must be registered and logged in to leave a comment about this article.