We often write about the amazing, charming, ridiculous things that 3D printers makes possible: see the fabbed hermit crab shells, the space shuttle made of pureed scallops and cheese, the “pirated” Penrose Triangle. But machines that can make any physical object using only resin powder can also be turned to more nefarious ends. Security blogger Brain Krebs reports that someone has deployed at least one impressively sophisticated ATM skimmer in LA that appears to have been 3D printed. The device fits over the front of a bona fide Chase ATM. Just looking at these babies sends a chill down your spine—this person or persons knew what they were doing. Here’s more from Krebs:
It is an all-in-one skimmer designed to fit over the card acceptance slot and to record the data from the magnetic stripe of any card dipped into the reader. The fraud device is shown sideways in this picture; attached to an actual ATM, it would appear rotated 90 degrees to the right, so that the word “CHASE” is pointing down….On the bottom of the fake card acceptance slot is a tiny hole for a built-in spy camera that is connected to a battery. The spy camera turns on when a card is dipped into the skimmer’s card acceptance slot, and is angled to record customer PINs.
Looking at the backside of the device shows shows the true geek factor of this ATM skimmer. The fraudster who built it appears to have cannibalized parts from a video camera or perhaps a smartphone (possibly to enable the transmission of PIN entry video and stolen card data to the fraudster wirelessly via SMS or Bluetooth). It’s too bad so much of the skimmer is obscured by yellow plastic. I’d welcome any feedback from readers who can easily identify these parts based on the limited information here.
For more information and pictures of the device, check out Krebs on Security.