Skimming activity up - Symantec

Image courtesy of FreeDigitalPhotos.net

Credit: Salvatore Vuono

Dumps are copies of the information stored on the magnetic stripe of the original card usually obtained via electronic 'skimming devices' fitted to the credit card machine or bank teller.

Candid Wuest, senior threat researcher at Symantec, said that the devices often take the form of an additional card reader that is placed over the original and records any data that passes through it.

"Skimming devices can be combined with a doctored keypad that is placed over the real one or a small video camera that records the PIN code entered for each card.

"Newer versions even contain a GSM module that will send the encrypted dumps back to the attacker.

"Video footage from surveillance cameras has shown that scammers can install the fake keypad and card reader in under five seconds," he said.

Once the information is obtained, criminals are then able to clone the credit card.

"The clones can be almost indistinguishable from authentic cards, often including holograms and embossed gold numbers.

"If the criminals have recorded the PIN codes, the cards can be used at any ATM to withdraw cash," Wuest said.

Symantec advised consumers to look out for any attached keypads or strange looking card slots.

Wuest stressed that this type of thievery was not confined to the developed economies and that travellers should be particularly wary when abroad.

"For example, thousands of football fans will be travelling to South Africa in a couple of months for the 2010 World Cup.

"While the country is a developing economy, it has a highly sophisticated and modern banking infrastructure and credit card fraudsters to match it," he said.