Re: ATM fraud [was: Phishing that scares me....]

[Jerry.Dixon () us-cert gov]

There has been several good shows on Dateline and others about this good 
ol' fashion style of fraud.  Also the skimmers will setup shop in some 
parking garages and tell unsuspecting guests that have checked out that 
they need their credit card to clear them from the garage when in 
actuality they skim it through a pager like device then leverage stolen 
blanks to create a replica for malfeasance. 

Jerry Dixon
US CERT Operations




Gadi Evron <ge () linuxbox org>
Sent by: funsec-bounces () linuxbox org
10/21/2005 09:52 PM
 
        To:     "Hubbard, Dan" <dhubbard () websense com>
        cc:     "FunSec \[List\]" <funsec () linuxbox org>
        Subject:        [funsec] ATM fraud [was: Phishing that scares 
me....]


Hubbard, Dan wrote:
> I don't know about you but I was pretty impressed with this one. Swipers
> have come a long way and this one looks like it would be very
> successful. 

Actually, ATM fraud is a big thing for a few years now. We have seen it 
here in Israel for quite some time. Romania also suffers from it more 
than others.

Putting an extra swipe on an ATM machine, putting a camera across the 
street, building a FAKE ATM entirely, etc. happen quite a bit.

Some interesting stories actually involve social engineering, such as 
for example a scammer using a working machine, waiting for someone to 
come and try a non-working machine that the Bad Guy jammed.

The Bad Guy than offers his help by trying the card on his machine.. the 
rest is history.

Another example is the Bad Guy offering help, and changing the cards 
from the Good one to a Bad one, thus causing the Bad to be swallowed 
while pocketing the real one.
:)

Lotsa scams.

                 Gadi.
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.