Newsroom

August 12, 2015

Krebs: New 'shimmer' ATM skimmer can read EMV card data

KrebsOnSecurity is reporting that a new "shimmer" ATM-skimming device has been found in Mexico that can read data directly off a chip-enabled credit or debit card.

The device acts as a shim between the chip on the card and the chip reader, recording the data on the chip as it is read by the ATM, Krebs reported.

Information about the shimmer device was reported by Damage Control S.A., a security and investigations company based in Mexico, Krebs said. The device was found inside a Diebold Opteva 520 with Dip reader.

Thieves have been able to create counterfeit magnetic stripe cards that are encoded with data stolen from a chip card. However, Krebs said, banks and credit unions can run a simple check to see if anyone is using stolen card verification values or CVVs.

Apparently the thieves in Mexico have targeted ATM machines that accept magnetic stripe cards and aren't checking for stolen CVVs.