Fake ATM, skimmers found in Las Vegas hotels

Fake ATM, skimmers found in Las Vegas hotels

Summary: A Google security researcher attending the Black Hat/DEFCON conferences in Las Vegas was victimized by a skimming device placed in an ATM at the Rio All-Suite Hotel and Casino.Chris Paget, an RFID security expert who now works on Google's security team, said he lost $200 to a rigged ATM that also claimed several other victims.

SHARE:
TOPICS: Security, Networking
17

A Google security researcher attending the Black Hat/DEFCON conferences in Las Vegas was victimized by a skimming device placed in an ATM at the Rio All-Suite Hotel and Casino.

Chris Paget, an RFID security expert who now works on Google's security team, said he lost $200 to a rigged ATM that also claimed several other victims.   Inexplicably, Paget said he got no help from hotel security or local police in Las Vegas when he reported the problem.

He used his Twitter account to warn about the dangers of using ATMs at the casinos in Las Vegas.

Paget's tale follows the discovery of a fake ATM planted at the Riviera Hotel, the site of the DEFCON hacker event.

Wired's Kim Zetter reports:

A malicious ATM kiosk was positioned in the conference center of the Riviera Hotel Casino capturing data from an unknown number of hackers attending the DefCon hacker conference before someone noticed something suspicious about the kiosk.

An organizer for the conference said security authorities seized the device. It’s not known how long the ATM was in the hotel or whether it was placed there by a DefCon attendee to catch his fellow hackers or simply by an outside criminal group trying to target conference attendees.

Witnesses say the kiosk was well-placed to avoid surveillance cameras.

The use of ATM skimmers in credit card fraud has exploded in recent years with rigged kiosks found at hundreds of locations throughout the U.S.

Topics: Security, Networking

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Talkback

17 comments
Log in or register to join the discussion
  • They probally enjoyed the irony

    of "hacking" the hackers.
    GuidingLight
  • If the cops find who did it, the only punishment they should get...

    ... is having their name(s) released to the public.

    Then we can sit back and watch their lives be destroyed by the eLIt3 hax0r5.
    Hallowed are the Ori
  • Um, one point...

    "Witnesses say the kiosk was well-placed to avoid surveillance cameras."

    This is standard industry practice. You do not want the camera able to observe the user entering their PIN number.

    Thus this comment is pretty much like saying "the solar panel was well placed to avoid shade..."

    Having said that I hope the perpetrators are caught and, um, *vigorously* resist arrest...save us all the cost of a trial.
    wolf_z
    • Question

      Couldn't they place the ATM in such a way that no cameras are looking at the keypad, but are still looking at the machine?

      It's strange that someone was able to even place a whole ATM kiosk in the middle of a casino without anyone in security noticing! Don't people need to be cleared to do any sort of facility work at these places?
      tikigawd
  • What is troubling is the lack of concern by the PD!

    If the police department is like Houston's then fake crimes (like speeding) are more lucrative (I mean important to public safety)!
    kd5auq
    • Well, for one thing...

      Going after speeders allows cops to satisfy their aggressive "little kid" complex...and play with their toys. A shootout at the end is just frosting on the cake. There's nothing like overflowing testosterone to get you through the day.

      Going after fraud crimes like this actually requires the use of mundane brain cells; where's the FUN in that?
      flatliner
      • Do you really believe that?

        As a retired law enforcement officer I've never met any officer who looks at a shootout as "frosting on the cake". That's absurd. If this is the way your brain perceives life, I understand why you got nailed by some traffic cop. So you got a ticket. Not exactly a big deal. Get over it and grow up.
        Fitz-7600
    • Las Vegas PD

      Las Vegas PD is still owned by the casinos. They won't do anything in regard to a casino without their direction.
      deanders
  • RE: Fake ATM, skimmers found in Las Vegas hotels

    LOL this is typical for Metro not to do their job, Nuff said about that. I live in Vegas and Metro will not get involved with a majority of the casinos here when it comes to fraud.
    Tracer76
  • That is true about reporting crime, some police ignore you

    Someone drilled a hole, near my lock, the key hole of my car, stole things from my car in Las Vegas. I tried to explain it to several people yet they treated me like I did not exist in the room. I understand the problem. Some people can report crime and others can not.
    troubled241
  • RE: Fake ATM, skimmers found in Las Vegas hotels

    Does this make for a good CSI story?
    Vahidm
  • RE: Fake ATM, skimmers found in Las Vegas hotels

    How about researching the phenom and giving tips on detection and avoidance of these things? I can understand how a complete ATM might be hard to recognize as fake, but aren;t the skimmers added to existing ATMs and therefore noticeable if you check where you're inserting your card?
    Timpraetor
  • LMFAO!!!

    He went to a HACKER convention. A black hat hacker convention none the less. These guys aren't script kiddies, and guys who live in their parents basements and use other people's programs to "crack" (there's a difference between hackers and crackers one that the general public will never understand or get right so I give up trying to educate the masses on it.), but hackers who do this for fun and profit.

    Now, you wouldn't suspect an ATM, but that's why you use ATM's located inside banks (it'd be harder to sneak one in to a bank.), or ones that don't look or act suspicious. Better yet... Carry cash instead. Sure, you could get mugged, but either way... *laughs* You still got your credit card number kept to yourself. He should be thankful he only lost $200 instead of his whole life savings.

    And he's security for google? *laughing even more* Yeah, that's really good. It's irony at it's best.

    Which brings up... If you're not a black hat hacker you have no business attending DEFCON in the first place. (*shakes head* Stupid newbies.)
    Dry_Land_Is_Not_A_Myth
    • So says the script kiddie.

      He found the device. Yes, even security professionals get fooled. Otherwise every criminal would be caught.

      You are whats wrong in the "hacker" community, grow up, stop acting elite and actually do something useful.
      Been_Done_Before
    • For the guy wondering about banning users w/ nothing to say

      Here's a prime example above: posting and still viable. ;)
      ejhonda
  • Hackers getting Hacked....

    and we care about this because?
    blc1839
  • RE: Fake ATM, skimmers found in Las Vegas hotels

    Great!!! thanks for sharing this information to us!
    <a href="http://www.yuregininsesi.com">seslisohbet</a> <a href="http://www.yuregininsesi.com">seslichat</a>
    birumut