The New Method of Attack
The new method uses a Deep Insertion Skimmer that alters the internal workings of the card reader. After this modification is performed, the skimmer can then operate inside the reader. The altered readers show no signs of outward damage to the ATM user. Because the skimmer is placed deep inside the reader, these devices are almost impossible to spot for an ATM user.
An indicator of a Deep Insertion Skimmer is impaired usability of the reader. The skimmer causes increased friction during card insertion and withdrawal. This is due to less space for the card in the throat of the reader. Other indicators are card read failures.
Skimming attacks also require the PIN. The most common method of PIN capture is the use of a covert camera hidden on the ATM. While Deep Insert Skimmers are very difficult to spot, PIN capture cameras are mounted on the outside of the ATM. PIN cameras are typically hidden behind fake panels added to the ATM fascia. Fake panels that conceal a camera have a small pin hole to allow the camera to view the PIN pad. Again, cover the keypad when entering your PIN to prevent it from being captured. Any small holes observed in the vicinity of the PIN pad should be considered suspicious.
