{"id":2242,"date":"2010-02-22T00:00:00","date_gmt":"2010-02-22T00:00:00","guid":{"rendered":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/2010\/02\/22\/criminals-hide-payment-card-skimmers-inside-gas-station-pumps\/"},"modified":"2021-12-30T11:40:55","modified_gmt":"2021-12-30T11:40:55","slug":"criminals-hide-payment-card-skimmers-inside-gas-station-pumps","status":"publish","type":"post","link":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/2010\/02\/22\/criminals-hide-payment-card-skimmers-inside-gas-station-pumps\/","title":{"rendered":"Criminals Hide Payment-Card Skimmers Inside Gas Station Pumps"},"content":{"rendered":"<p>Criminals hid bank card-skimming devices inside gas pumps &#8212; in at least one case, even completely replacing the front panel of a pump &#8212; in a recent wave of attacks that demonstrate a more sophisticated, insidious method of stealing money from unsuspecting victims filling up their gas tanks.  The scam was first discovered when a California bank&#8217;s fraud department discovered that multiple bank card victims reporting problems had all used the same gas pump at a 7-Eleven store in Utah.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The devices typically include a scanner, transmitter, camera, and, most recently, Bluetooth- or wireless-enabled links that shoot the stolen data back to the bad guys.<\/p>\n<p>A similar attack occurred with a rigged ATM machine last year in Las Vegas during the Defcon hacker show: Security researcher Chris Paget lost $200 to an ATM machine in the Rio All-Suite Hotel &#038; Casino that appeared to be operating normally, but failed to spit out cash.<\/p>\n<p>The U.S. Secret Service was investigating the incident, and it was unclear whether the machine was outfitted internally with a skimming device or had been tampered with for someone to grab the cash withdrawals at a later time.<\/p>\n<p>Bruce Schneier, CTO for BT Counterpane and author of the Schneier on Security blog, says attackers in Europe are also moving skimming devices inside gas pumps as a way to avoid detection.<\/p>\n<p>Troy Arnold from the Sandy police department told a local news outlets that the device in the 7-Eleven gas pump was the size of a cellular phone SIM card and was affixed to the card reader inside the pump.<\/p>\n<p>&#8220;It&#8217;s a small device &#8212; Bluetooth, the size of a SIM card &#8212; that is attached to the actual credit card reader.<\/p>\n<p>Back in December, a similar spree occurred in the Sacramento, Calif., area, where gas pumps at an AM\/PM convenience store were outfitted with card skimmers, transmitters, and small cameras that siphon victims&#8217; debit card data.<\/p>\n<p>http:\/\/www.darkreading.com\/database_security\/security\/attacks\/showArticle.jhtml?articleID=223100233&#038;cid=RSSfeed<\/p>\n<p>[Link to an article showing a typical ATM skimmer setup: http:\/\/www.snopes.com\/fraud\/atm\/atmcamera.asp.  But remember all they really need, is the skimmer to be installed and a good camera!]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"class_list":["post-2242","post","type-post","status-publish","format-standard","hentry","category-trends"],"_links":{"self":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/2242","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=2242"}],"version-history":[{"count":1,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/2242\/revisions"}],"predecessor-version":[{"id":4729,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/2242\/revisions\/4729"}],"wp:attachment":[{"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=2242"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=2242"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cybersecurityinstitute.com\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=2242"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}