Spies Want Your Money: Look at this pinhole camera used to steal credit card numbers

Threats to our information are not only from malware or brute force hacks or social engineering. Criminals are motivated to look for every advantage. Sometimes we read about very sophisticated attacks against hardware that require advanced engineering. But attacks don’t really have to be sophisticated to be successful. Two relatively easy to execute attacks were recently highlighted by the New York City Metropolitan Transportation Authority.

Their press release is provided below. But first check out these incredible photos:

More from the MTA (10 April 2014):

MTA New York City Transit Reminds Customers to Watch for Scammers Who Target MetroCard Vending Machines

MTA New York City Transit is asking customers to be vigilant when purchasing MetroCards at MetroCard Vending Machines (MVMs) after a skimming device and hidden camera were uncovered at an MVM inside the 59 St-Columbus Circle station (see photos below). The device was discovered last night around 9:30 p.m. attached to an MVM located on the north end of the southbound  platform at Columbus Circle.

An unidentified customer noticed the device, removed it from the machine and brought it to the Station Agent on duty. The New York Police Department is investigating the device.

New York City Transit urges customers who have purchased a MetroCard at that location using a credit or debit card to immediately check with their bank or credit card company to determine if their accounts show any signs of unauthorized activity.

“We have already dispatched personnel to check all MVMs system-wide today for other devices,” said MTA New York City Transit President Carmen Bianco. “As was the case yesterday, we continue to ask our customers ‘If You See Something, Say Something,’ particularly if they notice any suspicious activity or device in our system.”

MTA New York City Transit will also develop a public information campaign to remind customers to be on guard when purchasing MetroCards at MVMs. The best way to avoid fraudulent activity is to sign up for the EasyPay MetroCard. The EasyPay MetroCard is linked to your credit or debit card, and refills automatically as you use it. EasyPay customers never have to make a purchase at a MVM and have the added convenience of using automated telephone service or www.easypaymetrocard.com to track their account 24/7.

Other Resources:

Spy Sites of New York: A Guide to the Region’s Secret History

Foreign Spies Make Recession Worse and Steal Part of Our Future

Who Is Spying On Me? A taxonomy of spies in the modern technology landscape

Advancing Genomics Through Big Data Studies: An Interview with Dr. Mark Guyer of NIH