Financial Transcation Card Theft Information Hope you can use and not be a victim. U//FOUO) Bluetooth-Enabled Credit Card Skimming on the Rise (U//FOUO) Criminal hackers are increasingly using Bluetooth-enabled technology in card skimming operations to improve operational security by reducing the time required to retrieve data. Bluetooth-enabled skimming devices allow thieves to wirelessly retrieve captured credit card data, negating the need for repeated physical access to retrieve data. Criminal hackers are most vulnerable to discovery during the installation and retrieval of the skimming device, which takes approximately 5-10 minutes. These devices are nearly impossible to detect once installed and are available for purchase online. (U) Bluetooth is a low-power, short-range wireless connection technology. In its most common implementation, such as mobile devices, it has a range of 30 feet, which can be extended to 300 feet depending on the Bluetooth device class. » (U) In late January 2014, criminal hackers were charged with stealing banking information from gas station customers by using Bluetooth-enabled skimmers concealed within gas pumps at RacewayUSPER and RacetracUSPER gas stations in the southern United States. The Bluetooth-enabled skimmers allowed the criminals to retrieve the harvested data wirelessly by simply pulling up to the pump and downloading the data onto a laptop. The criminals then encoded the stolen data onto forged cards, and between March 2012 and March 2013, used the forged cards to withdraw $2.1 million from automated teller machines (ATMs) in the Northeast. » (U) In October 2012, security research firm Trustwave SpiderlabsUSPER analyzed a Bluetooth-enabled device found on several point-of-sale devices at an unidentified major US retailer. The firm found that unlike most other skimming devices, this device was capable of encrypting data, both while stored on the device and during transmission, making it difficult to quantify damages and identify victims. (U//FOUO) Guidance to Enable Public Credit Card Skimmer Fraud Awareness » (U) Inspect the card reader and the area near the PIN pad for any suspicious devices or tampered-with equipment. » (U) If using a debit card, attempt to conceal the PIN from visual detection by covering the keypad with your hand as you enter it. » (U) Use gas pumps and ATMs that are in plain view of passersby and surveillance cameras. » (U) Look at other nearby gas pumps or ATM card readers to see if they match the one you are using. » (U) For ATMs, inspect the device—look for uneven colors or loose PIN pads—and tug on card slot before insertion.
Posted on: Wed, 24 Sep 2014 21:40:20 +0000