How data is stolen from an ATM

Tomcat

Professional
Messages
2,689
Reaction score
932
Points
113
One February day, a user of the glorious American Bank of America ATM in California discovered a strange silver plexiglass device attached to the card slot. The device resembled a special plug to prevent card theft.

However, our hero was not at a loss and turned to the bank, as a result of which another device was discovered: a camera powered by batteries and activated by a motion sensor. This camera was hidden in a special box and attached to the corner of the ATM in a place where you can conveniently observe the PIN code being entered.

9e765604a42ccd2a37c950817a3e9cfa.jpg


As a result, the ATM began to look like this:

8de1dd0e163a0ae34b28112371e2ddbb.jpg


As it turned out, on camera the attacker received an image with the entered PIN code linked to the time when it happened:

bofa1stcustomer.jpg


At the same time, a skimmer installed on top of the original card insertion slot read the data and also linked it to time.

31d53b51efd1b0b6a9045e06a9eae18f.jpg


The received data can either be stored on a card, which the attacker quietly takes over time, or transmitted using simple WiFi or GPRS. The card, by the way, can be stored in the camera itself. By the way, the described camera is called Camball-2, it costs about $200 in the USA and can operate in the specified mode for 48 hours.

image


According to bank representatives, this scheme is one of the most popular schemes for stealing credit card data from ATMs. Typically, such devices are installed the night before the weekend, when banks are closed and the influx to ATMs is especially high.

Here are some tips we offer to protect you from possible theft.

1. Always cover the terminal with your hand when entering your PIN code, even if no one is standing next to you.
2. If there is some kind of suspicious device on the card input slot of the ATM, it is better to use another ATM.
3. If you suspect that your card has been compromised, immediately notify the bank with a statement, etc. In case of theft of funds using hacking of an ATM or various additional devices (as in this article), all expenses must be reimbursed by the bank itself. Well, at least in the USA :)
UPD: Since they accuse that everything is too simple, I will add more complicated versions :)

Here is the camera installed in the mirror. Usually on some ATMs they hang such a mirror so that you can make sure that no one is spying on your PIN code behind your back:

6ef557b8ba129da6f1a7afb00b74b7ae.jpg


Only at the bottom of the mount of this mirror there is a hole where the camera is installed:

f44bd8e1a18ede78fb7a5d4625f72ec5.jpg


Often skimmers are placed on the doors in the small foyer where the ATM is located. Well, so that just anyone doesn’t come in, but only cardholders and only this bank. You can also put a reader in these skimmers:

0a83a0c04ebd371005e7afcd43c8e4ac.jpg


63eac1a393069c4c520de06d3eb98e90.jpg


There are really a lot of options - here the imagination works well, no one needs it.
 
Top