NCR raises alarm over ATM network cable skimming

Comments · 314 Views

NCR raises alarm over ATM network cable skimming

This week NCR Corp. issued a security alert citing "reliable reports of NCR and Diebold ATMs being attacked through the use of external skimming devices."Get more news about Atm Cable,you can vist our website!

In these cases, thieves plugged skimmers into the ATM network cables in order to intercept customer card data.

Separately, the fraudsters attach a device to the ATM in order to capture PINs. A keyboard overlay was used in an attack on an NCR ATM, a concealed camera was used on a Diebold ATM.

PIN data is likely transmitted wirelessly to the skimming device, NCR said. The company did not say where the attacks occurred.

ATMs at greatest risk are those that have a network communications cable in a publicly accessible location, the NCR advisory said, but noted that "this vulnerability can easily be prevented," NCR recommended that ATM operators take several actions to avoid external skimming attacks:
The PCI Security Standards Council mandated almost exactly a year ago that payment card data transmissions must move from the unacceptably vulnerable SSL protocol to the significantly more secure TLS (version 1.1 or later) protocol.

In April, the council published TLS guidelines and set a deadline of June 1, 2016, for implementation of the new standard. However, in December, the council pushed the deadline to June 1, 2018, citing issues related to implementation in the field.

Comments