Physical Security Attack to Compromise Credit/Debit Cards

The link below is an interesting article from the latest SANS NewBites email where attackers bribed gas station clerks to allow them to install skimmers inside the gas station’s card readers.  The British pound is worth about $2 US, so you can roughly double the numbers in the article to get U.S. currency. [more]

In the SANS email, one of the SANS commentators said: “This story highlights how once physical security, in this case the attendants, is compromised then all the technical security controls cannot protect you.  Have a look at your own information security infrastructure and see what can be bought for GBP 15,000 (US$29,737), would it be a new firewall or your firewall administrator?”