Tuesday | 2 December, 2008
Hackers prep for credit card scam in UK supermarkets
Hackers have been preparing for a large scam using cloned US credit cards in British supermarkets.
Leo King (Computerworld UK) 02/09/2008 08:26:00

Cyber criminals have been planning to conduct a sophisticated scam that involves using cloned US credit cards to target self-checkouts in British supermarkets.

The criminals have been plotting to clone magnetic stripes to create cards, and then use these cloned cards to loot US bank accounts at British checkouts, BBC reports.

In online forums, the thieves discussed how to use self-service tills, in particular in Asda and Tesco, to conduct transactions without being watched by a cashier. But the supermarkets told the BBC that there was little chance the criminals would make significant gains.

Andrew Moloney, a security expert at software supplier RSA, said cloning the magnetic stripe on the card is "one of the simplest ways to commit fraud."

"There's no pin involved, it's not encrypted, and the hardware for doing it is readily and legally available. It's essentially the same hardware you'd use when making a membership card," he said.

Unlike the UK chip and pin system, US credit cards only require a signature for transactions. In the planned scam, the fraudster would create cloned cards, therefore could create any signature they wish.

But the criminals' plan may have been flawed because self service tills in many supermarkets will not accept transactions without a pin being entered, according to a Tesco spokesperson. Tesco also said a member of staff would have to approve a signature. Asda could not be reached for immediate comment on its authorization controls.

Even the pin identification system is not completely safe, according to Eric Domage, manager of western European security research at analyst house IDC. In one instance in Paris, he said, criminals were placing fake cash machines on the front of real machines, capturing the cards and pin numbers, and then taking the cards round the corner to spend thousands of euros.

But criminals using cloned cards are also taking a risk, Domage said. "People doing this will be caught easily on camera when they use the self service tills."

Also many cloned cards could lack proper bank imagery or logos, which presents a major problem for the fraudsters, Moloney at RSA explained. "The card has to look credible, and often cloned cards are blank. By checking, the supermarkets would reduce the chance of this type of fraud."

Additional Resources
Executive Guides
Whitepapers
Zones
Zone logoZones provide focussed content from Computerworld and leading technology partners.
Newsletter Subscription
Sign up for our Computerworld newsletters!
RSS Feeds
Market Place

 

Smart SOA World Tour

Discover how SOA can create smarter outcomes for your business.

Attend and learn:

  • How SOA is helping leading companies to become more agile
  • Where you should be applying SOA processes in your company
  • The top SOA implementation mistakes to avoid

Click here for more information.
Whitepaper

Controlling storage costs with Oracle database 11g

Organisations must embrace new ways of storing data that don't involve adding more of the same hardware to accommodate data growth and dealing with duplication as well as uncompressed information. Simple steps such as tiering storage, moving data across these tiers and reducing the amount of data to be managed, can dramatically reduce capital and operating expenses. Read on to learn how to implement these steps in your business.

Enterprise IT Buyer's Guide
Find Technology Vendors Fast
 
Find vendors by name | Find by category
Sponsored Links