📜 ⬆️ ⬇️

How to steal data from an ATM

One February day, the user of the glorious ATM of the glorious American Bank of America in California discovered a strange silver plexiglass device attached to the card receiving slot. The device resembled a special stub from card theft.

However, our hero did not lose his head and turned to the bank, as a result of which another device was discovered: a camera powered by batteries and activated by a motion sensor. This camera was hidden in a special box and attached to the corner of the ATM in a place where you can comfortably watch the PIN entered.


image
')
In total, the ATM began to look like this:

image

As it turned out, the attacker received an image on the camera with a PIN code entered with reference to the time when it happened:
image

At the same time, a skimmer mounted on top of the original card insertion slot reads the data and also tied them to time.

image

The received data can be stored on a map, which the attacker eventually takes on imperceptibly, and transmitted via simple WiFi or GPRS. The map, by the way, can be stored in the camera itself. By the way, the described camera is called Camball-2, it costs about $ 200 in the USA and can work in the indicated mode for 48 hours.

image

According to representatives of the bank, such a scheme is one of the most popular schemes to steal credit card data from ATMs. Usually, such devices are installed on the night before the weekend, at which banks are closed and the inflow to ATMs is particularly large.

Here are some tips to help protect you from possible theft.

1. Always cover the terminal with your hand when you enter your PIN, even if no one is standing next to you.
2. If there is some kind of suspicious device in the slot for inserting a card into an ATM, it is better to use another ATM.
3. If you suspect that your card has been compromised - immediately notify the bank with the writing of the application, etc. In the case of theft of funds using a hacking ATM or various additional devices (as in this article), all costs must be compensated by the bank itself. Well, in any case - in the USA :)
UPD: Since they accuse that everything is too simple, I will add more complicated versions :)

Here is a camera mounted in the mirror. Usually at some ATMs they hang up such a mirror so that you can make sure that no one is behind your back looking at your PIN code:
image
Only here at the bottom of the mounting of this mirror a hole is made where the camera is installed:
image

Often skimmers put on the door in a small lobby, where there is an ATM. Well, so that no-one visits, only cardholders and only this bank. In these skimmers, you can also slip the reader:
image
image

There are really a lot of options - here the imagination works well for anyone.

Source: https://habr.com/ru/post/113977/


All Articles