NCR Corp – Computer Security Articles

NCR Barred Mint, QuickBooks from Banking Platform During Account Takeover Storm

November 3, 2019 admin A Little Sunshine, credential replay attacks, digital insight, intuit, Mint, NCR Corp, quickbooks online, The Coming Storm, Web Fraud 2.0

Credit to Author: BrianKrebs| Date: Sun, 03 Nov 2019 21:41:48 +0000

Banking industry giant NCR Corp. [NYSE: NCR] late last month took the unusual step of temporarily blocking third-party financial data aggregators Mint and QuicBooks Online from accessing Digital Insight, an online banking platform used by hundreds of financial institutions. That ban, which came in response to a series of bank account takeovers in which cybercriminals used aggregation sites to surveil and drain consumer accounts, has since been rescinded. But the incident raises fresh questions about the proper role of digital banking platforms in fighting password abuse.

Independent Krebs

First ‘Jackpotting’ Attacks Hit U.S. ATMs

January 27, 2018 admin All About Skimmers, atm jackpotting, atm logical attacks, Daniel Regalado, Diebold Nixdorf, Diebold Opteva, endoscope, FireEye, Latest Warnings, NCR Corp, Ploutus.D, The Coming Storm, U.S. Secret Service, Windows 7, Windows XP

Credit to Author: BrianKrebs| Date: Sat, 27 Jan 2018 18:45:08 +0000

ATM “jackpotting” — a sophisticated crime in which thieves install malicious software and/or hardware at ATMs that forces the machines to spit out huge volumes of cash on demand — has long been a threat for banks in Europe and Asia, yet these attacks somehow have eluded U.S. ATM operators. But all that changed this week after the U.S. Secret Service quietly began warning financial institutions that jackpotting attacks have now been spotted targeting cash machines here in the United States.

Independent Krebs

Anti-Skimmer Detector for Skimmer Scammers

December 5, 2017 admin alex holden, All About Skimmers, Charlie Harrow, Hold Security, NCR Corp, Smart Shield Detector

Credit to Author: BrianKrebs| Date: Tue, 05 Dec 2017 20:37:22 +0000

Crooks who make and deploy ATM skimmers are constantly engaged in a cat-and-mouse game with financial institutions, which deploy a variety of technological measures designed to defeat skimming devices. The latest innovation aimed at tipping the scales in favor of skimmer thieves is a small, battery powered device that provides crooks a digital readout indicating whether an ATM likely includes digital anti-skimming technology.

Independent Krebs

Dumping Data from Deep-Insert Skimmers

August 22, 2017 admin Charlie Harrow, deep-insert skimmer, NCR Corp, Other

Credit to Author: BrianKrebs| Date: Tue, 22 Aug 2017 14:19:02 +0000

I recently heard from a police detective who was seeking help identifying some strange devices found on two Romanian men caught maxing out stolen credit cards at local retailers. Further inspection revealed the devices to be semi-flexible data transfer wands that thieves can use to extract stolen ATM card data from “deep-insert skimmers,” wafer-thin fraud devices made to be hidden inside of the card acceptance slot on a cash machine.

Independent Krebs

ATM ‘Shimmers’ Target Chip-Based Cards

January 27, 2017 admin atm shimmer, atm shimming, iCVV, NCR Corp, Other

Several readers have called attention to warnings coming out of Canada about a supposed new form of ATM skimming called “shimming.” Shimming attacks are not new (KrebsOnSecurity first wrote about them in August 2015), but they are likely to become more common as a greater number of banks in the United States shift to issuing chip-based cards. Here’s a brief primer on shimming attacks, and why they succeed.