December 10, 2019 News Magazine

A new app can detect Bluetooth credit card skimmers on gas pumps

A team of computer scientists has built a new app that can wirelessly detect credit card skimmers, often found discreetly placed on gas pumps and bank ATMs.

Gone are the days where entire card skimmers would take over the front facade of an entire cash machine. Credit card skimmers are tiny, almost invisible — and many contain Bluetooth wireless capabilities, meaning skimming operators can install their credit card data-stealing skimmers just once and never have to take apart a gas pump again. Instead, criminals can just pull up in their car and wirelessly download the stolen card data.

Skimmers are also often connected to the magnetic stripe reader or the keypad, not only to steal your credit card number but also your PIN and ZIP codes.

This new app, dubbed Bluetana, developed by researchers at the University of California, San Diego and the University of Illinois Urbana-Champaign, can detect Bluetooth-enabled skimmers without having to dismantle vulnerable gas pumps.

By detecting Bluetooth signatures, the app aims to find more skimmers without flagging false positives, like speed-limit signs and fleet tracking systems, said Nishant Bhaskar, a PhD student and one of the researchers. Many skimmers use the same components, which when detected can indicate the presence of a skimmer. The prefix of the Bluetooth device’s unique MAC address is then compared to a hit list of prefixes known to be used by skimmers recovered by law enforcement. The app also uses signal strength is a “reliable way” to determine if a Bluetooth skimmer device is located near a gas pump.

The app was developed after field testers obtained scans of 1,185 Bluetooth gas pump skimmers in six U.S. states.

It’s a new technique aimed at improving on existing efforts designed to detect these tiny, inconspicuously installed skimming devices. Bluetooth skimmers are popular among scammers and fraudsters, not least because they offer a high return on investment. A single device can cost $20 to develop and can be used to steal thousands of dollars in a single data, depending on where the skimmer is located.

So far, the Bluetana app has detected 64 Bluetooth-based skimmers that had evaded other, existing scans, according to the researchers, and cuts down detection time to just a few seconds rather than minutes.

But don’t expect the app to come to consumers any time soon. The app is currently in use by U.S. law enforcement. Currently the app is in use in several U.S. states, the researchers said.


Source: TechCrunch

Tags: in Uncategorized
Banner
Related Posts

Startup says ‘Sober is the new black’

October 8, 2019

October 8, 2019

Maveron, Slow Ventures and Female Founders Fund have invested $10 million in a startup that claims it’s carving a new...

Artificial intelligence can contribute to a safer world

August 14, 2019

August 14, 2019

Matt Ocko Contributor Share on Twitter Matt Ocko is co-Managing Partner and co-founder of DCVC (Data Collective). Alan Cohen Contributor...

Revisiting Jumia’s JForce scandal and Citron’s short-sell claims

October 29, 2019

October 29, 2019

In advance of Jumia’s November financial reporting, it’s worth revisiting the company’s second quarter results, the downside of which included...

Google latest Android Studio release focuses on speed and stability

May 7, 2019

May 7, 2019

At last year’s I/O developer conference, Google announced Project Marble, an effort to bring more speed and stability to the...

The Samsung Galaxy Fold is headed to Canada, with in-store pre-orders starting today

November 28, 2019

November 28, 2019

The Samsung Galaxy Fold is a very unique smartphone, in more ways than one. The most obvious differentiator is that...

Mubi launches streaming service in India

November 19, 2019

November 19, 2019

Mubi, a 12-year-old on-demand movie streaming and rental service, has arrived in India. Like other streaming services giants such as...

LittleBits and Disney launch Snap the Gap to teach girls STEM

April 2, 2019

April 2, 2019

LittleBits, Disney and UC Davis announced this morning that they’ve joined forces for the launch of Snap the Gap. The...

Samsung’s Galaxy Watch Active 2 is a solid smartwatch for Android users

October 12, 2019

October 12, 2019

Samsung makes good, underrated smartwatches. It’s just been difficult to get much attention in a category so utterly dominated by...

Gender & compensation at VC-backed startups – Where are we today?

June 26, 2019

June 26, 2019

Conrad Lee Contributor Conrad Lee leads the VC Executive Compensation Survey and Option Impact at Shareworks Compensation, formerly Advanced-HR. He...

Porsche unveils the $150,900 Taycan Turbo electric sedan

September 4, 2019

September 4, 2019

Porsche has poured more than $1 billion into the development of its first all-electric vehicle, a sleek four-door specimen that...

Many popular iPhone apps secretly record your screen without asking

February 6, 2019

February 6, 2019

Many major companies, like Air Canada, Hollister and Expedia, are recording every tap and swipe you make on their iPhone apps....

Scaleway refreshes entry-level cloud instances

March 28, 2019

March 28, 2019

Cloud-hosting company Scaleway is upgrading its entry-level instances today. These instances are now all equipped with DDR4 ECC RAM, NVMe...

India’s ride-hailing giant Ola makes serious bet on two-wheeler

September 12, 2019

September 12, 2019

Ola, the largest ride-hailing service in India, said today its two-wheeler service — Ola Bike — is now operational in...

Fortnite Season 8 is about to kick off — here’s what to expect

February 28, 2019

February 28, 2019

Fortnite Season 8 is almost here. There’s a lot we don’t know — most things, really — but the long...

Google Search gets freshers featured snippets

August 1, 2019

August 1, 2019

Featured snippets are surely one of the most useful features that Google added to its search engine in recent years....

Comments
Leave a Reply

Your email address will not be published. Required fields are marked *