funsec mailing list archives

UK: Chip and Pin Scam 'Has Netted Millions From British Shoppers'


From: "Paul Ferguson" <fergdawgster () gmail com>
Date: Fri, 10 Oct 2008 19:49:12 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Via The Telegraph.co.uk.

[snip]

Dr Joel Brenner, the US National Counterintelligence Executive, warned that
hundreds of chip and pin machines in stores and supermarkets across Europe
have been tampered with to allow details of shoppers' credit card accounts
to be relayed to overseas fraudsters.

These details are then used to make cash withdrawals or siphon off money
from card holders' accounts in what is one of the largest scams of its
kind.

In an exclusive interview with The Daily Telegraph, America's
counterintelligence chief said: "Previously only a nation state's
intelligence service would have been capable of pulling off this type of
operation. It's scary."

An organised crime syndicate is suspected of having tampered with the chip
and pin machines, either during the manufacturing process at a factory in
China, or shortly after they came off the production line.

In what is known as a "supply chain attack", criminals managed to bypass
security measures and doctor the devices before they were dispatched from
the factories where they were made.

[snip]

Much more:
http://www.telegraph.co.uk/news/newstopics/politics/lawandorder/3173346/Chi
p-and-pin-scam-has-netted-millions-from-British-shoppers.html

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFI8BQjq1pz9mNUZTMRAthJAJ9DvAMrwXKG+dKu8OqMRw/IU5I1pwCg6cid
+DQ8CmQNWe5xHR9Atdz+BR0=
=aH5r
-----END PGP SIGNATURE-----


-- 
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawgster(at)gmail.com
 ferg's tech blog: http://fergdawg.blogspot.com/
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: