Used ATM Machines for Sale on Craigslist
Used ATM machines are for sale on auction sites, many of which still contain credit card numbers.
Identity theft expert Robert Siciliano is claiming that he bought a used ATM machine on Craigslist for $750. Apparently, this isn't unusual: he found plenty of machines on both Craigslist and eBay ranging between $500 and $2000 USD. However, this particular ATM machine was listed by a bar north of Boston, and contained 1000 credit card numbers.
That's right: the machine wasn't wiped. Siciliano said, in an interesting way, that his "hacker friend" came over with a manual and gutted the machine's eprom, spilling the 150-foot spread of sensitive data all over the floor. Surprised and excited, Siciliano thus called a "TV producer friend," and now his local FOX affiliate is running a series on ATM hacking and Siciliano's discovery.
Siciliano also said in his report that he was considering a scheme to use the numbers to leech millions from unsuspecting victims, however his wife told him a firm "NO!"
FOX Boston, on the other hand, added that the credit cards stored in the ATM consisted of numbers processed in a four month period. With that said, it's highly likely that many more used ATM machines for sale on eBay, Craigslist, and other auction sites contain credit card numbers, ripe for the picking. Then again, consumers are more susceptible to identity theft thanks to ATM skimming devices sold on the very same auction sites.
So how do you protect yourself from ATM hackers? "By paying attention to your statements," Siciliano said. "Don’t use just any ATM. Instead, look for ATMs in more secure locations." He also said to cover your pins when punching them into the keypad on the ATM or within retail stores.
Get more tech and gaming news by hitting me up on Twitter here.
-
Previous News Article
News Corp Rivals Threaten to... -
Next News Article
TV Market to Launch...
What's an "ATM machine"? An "Automated teller machine machine"? Is it a machine that makes ATMs?
We're in the money.
Probably a stolen machine! Seriously, even older ATM's should not be exposed of in the trash!
Anything that can contain data, should be liquidated, save the parts that are harmless..
I can't even believe that a company is allowing such machines on the street, ready to be reverse engineered by a hacker!
I suspect the prices of used ATMs will start to go up quite a bit soon.
It's sad when the security in a game console is like 20x times superior than an ATM.
What's an "ATM machine"? An "Automated teller machine machine"? Is it a machine that makes ATMs?
No, an ATM machine is where you go to deposit or withdraw ATMs!
It's sad when the security in a game console is like 20x times superior than an ATM.
+1
weird, I've never used a credit card in an ATM. I'm surprised they store CC numbers as well.
Plus, how do you spill "150 feet" of sensitive data all over the floor? WTF?
By printing?
This guy has a "hacker friend" and a "tv producer friend". It's all just a little to convenient for me!
With a few modifications they could be a high tech solution to dispensing gumballs with the swipe of a card.
Who cares if there's still data on it? If hackers/crackers break them open they could find a way to make them spill out cash
I rather them make them spill out cash then steal someone's number. At least then it would be the bank's problem and not some poor unsuspecting soul..
The guy who sold it is kicking himself right about now.
Never use an ATM at a bar or anywhere that's not a bank.
i should get one and use it as a beer dispenser at a swipe
the usa atm system is really ancient...
"Plus, how do you spill "150 feet" of sensitive data all over the floor? WTF?"
The article ment they printed out the EPROM data onto paper and layed it out on the floor. Then they look at the data and decide what is a credit card number etc. Credit card numbers follow a certain patten so it would be rather easy to pull out the numbers.
I'm surprised that an ATM would even store a credit card number for longer than it takes to complete a transaction. Yes, there would be paper audit copies of the transaction slips, but those are picked up when they put money in, aren't they?
Anyways, even without sensitive data, an ATM could be set up to pretend it was still online, and get people's PIN numbers, so besides removing the hard drives, they need to remove the trademarks of whoever owned it.
Wow... I feel sorry for thousands of people who are getting scammed like this.
I know my own card was skimmed... I'm going to try to use cash only in my area (since it was a local shop, but I don't know which).
But to be honest, I'd probably take the momey and run to Cuba myself.
Actually to have both is not that strange. I have the same type of friends. Helps that I used to work at a tv station but they are people to (well most of them). And yes TV people also have "Normal" friends lol. As for a "Hacker friend" COMON who on this board dosent know several. I think the key was "He had the manual". LOLZ gotta love the internet.
I rather them make them spill out cash then steal someone's number. At least then it would be the bank's problem and not some poor unsuspecting soul..
The ATM was sold, and no longer at the bank. so how are you supposed to make it spill out cash?? You think someone sold an ATM full of money?
And even if it still at the bank, how do you make it spill out cash without someone noticing?
Buying an atm online, and getting the credit card numbers would be a lot easier than trying to hack an ATM in situ and taking the money....
So I shouldnt hit up the ATM at the strip club?
This is why I say don't buy things on Craigslist...
I once bought a toilet on craigslist and asked my "hacker friend" to help me install it. When he opened it, it spilled 150 feet of crap in my house. The seller left 4 months of sensitive data in my product too..