Cyber criminals have been planning to conduct a sophisticated scam that involves using cloned US credit cards to target self-checkouts in British supermarkets.
The criminals have been plotting to clone magnetic stripes to create cards, and then use these cloned cards to loot US bank accounts at British checkouts, BBC reports.
In online forums, the thieves discussed how to use self-service tills, in particular in Asda and Tesco, to conduct transactions without being watched by a cashier. But the supermarkets told the BBC that there was little chance the criminals would make significant gains.
Andrew Moloney, a security expert at software supplier RSA, said cloning the magnetic stripe on the card is "one of the simplest ways to commit fraud."
"There's no pin involved, it's not encrypted, and the hardware for doing it is readily and legally available. It's essentially the same hardware you'd use when making a membership card," he said.
Unlike the UK chip and pin system, US credit cards only require a signature for transactions. In the planned scam, the fraudster would create cloned cards, therefore could create any signature they wish.
But the criminals' plan may have been flawed because self service tills in many supermarkets will not accept transactions without a pin being entered, according to a Tesco spokesperson. Tesco also said a member of staff would have to approve a signature. Asda could not be reached for immediate comment on its authorization controls.
Even the pin identification system is not completely safe, according to Eric Domage, manager of western European security research at analyst house IDC. In one instance in Paris, he said, criminals were placing fake cash machines on the front of real machines, capturing the cards and pin numbers, and then taking the cards round the corner to spend thousands of euros.
But criminals using cloned cards are also taking a risk, Domage said. "People doing this will be caught easily on camera when they use the self service tills."
Also many cloned cards could lack proper bank imagery or logos, which presents a major problem for the fraudsters, Moloney at RSA explained. "The card has to look credible, and often cloned cards are blank. By checking, the supermarkets would reduce the chance of this type of fraud."
Read up on the latest ideas and technologies from companies that sell hardware, software and services. Discover the advantages of an open architecture multi-vendor network solution
Mimosa™ NearPoint™ for Microsoft® Exchange Server: Email Archiving 101
Strategies for Eliminating .PST Files
Email Archiving 101—Customer Case Study
Making the Business Case for IT Consolidation
Taking On Demand CRM Integration to the Next Level
Best Practice in Building an Integrated Information Management Strategy
Data grids and service-oriented architecture
Zones provide focussed content from Computerworld and leading technology partners.Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
AARNet Helps to Advance Indigenous Health 2008-12-02 12:44:00+11
Orbis selects Telstra International as its data centre partner for the UK, Europe and Middle East Region 2008-12-02 11:23:00+11
ComOps Deploys Corporate Performance Reporting Solution For Healthcare Test Manufacturer 2008-12-02 10:09:00+11
Mornington Peninsula Shire implements Objective to manage knowledge and deliver service excellence 2008-12-02 09:56:00+11
Virtual magic: HR specialist throws out 40 servers, adds 8TB SAN and saves $100,000 for disaster recovery 2008-12-01 15:28:00+11
Controlling storage costs with Oracle database 11g
Organisations must embrace new ways of storing data that don't involve adding more of the same hardware to accommodate data growth and dealing with duplication as well as uncompressed information. Simple steps such as tiering storage, moving data across these tiers and reducing the amount of data to be managed, can dramatically reduce capital and operating expenses. Read on to learn how to implement these steps in your business.












