DEF CON 27: Finding ATM Skimmers with Hunter Cat - Hak5 2604
ฝัง
- เผยแพร่เมื่อ 5 ต.ค. 2024
- Hak5 -- Cyber Security Education, Inspiration, News & Community since 2005:
____________________________________________
Salvador shows us how his device, the Hunter Cat, can help with finding ATM skimmers.
Follow Salvador here:
/ netxing
hunter.electron...
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
Our Site → www.hak5.org
Shop → www.hakshop.com
Subscribe → www.youtube.co...
Support → / threatwire
Contact Us → / hak5
Threat Wire RSS → shannonmorse.p...
Threat Wire iTunes → itunes.apple.c...
Host: Shannon Morse → / snubs
Host: Darren Kitchen → / hak5darren
Host: Mubix → / mubix
-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆
____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community - where all hackers belong.
DO NOT ALERT the gas station owner. Call the cops. It's a matter of police .... because the site manager may be in on the skim. I've seen that happen.
HAK5 should pin this comment. I've worked cases where the station owners were the ones who installed the skimmers. Reason we found out is because they were dumb enough to use the government fuel account to attempt to make purchases.
Yep, that makes more sense. Perps may be watching too.
That guy is doing great work 👍🏻 fantastic product.
No Name or if you carry one to verify that the ATM has no skimmer, I’ve come across a skimmer before that was pretty well disguised but could tell because i always used that ATM. I went in and let the bank manager know, the banks don’t check those ATMS enough to catch them all.
@No Name what do you mean? You use it to prevent someone with malicious intentions from getting your card information
@@walkinmn As a customer, maybe he think it is impractical that customer will bring this device alongside their card. and usually the victim is not aware about skimming device, micro camera installed on the pinpad, etc.
And maybe, this product maybe will known at IT security community, but not at regular customer with minimum understanding of IT security.
For bank, it's useful for quick and accurate skimming device detection when patrolling to ATMs in high risk area. although Bank engineer can just open the fascia to inspect/detect any illegal device but it's take some time and skill/experience and prone to human error.
This product still useful for customer who have no choice to do transaction in high risk area such as gas station, tourism area, etc. and want to get some prevention.
@@aft9504 yes of course, a non tech savvy user could see this as too much of a hassle, but this is Hack5 channel you assume most of the people watching this would no about it and some i assume will see the atractive and some don't, that's how it is, but is still a great idea.
I have card information.but I don’t how to use that.😖😖
Damn, $30? This needs to be in everybody's pocket.
Funny Momentz The price has been raised, it 42 dollar with shipping to EU.
Tried to order one but.. the server has crapped itself and throws 503.. People must be interested?!
@@KarryKarryKarry I ordered two earlier.
Wow, in the list for a future purchase. Cool device, can't wait to test it.
For $30, that's one hell of a bargain.
This is a legit great product! Bought it and tested it on various ATM and Gas Station works really good and for the price you can't complain.
So have you had yellow or red? Also is there a protective case that is not bulky?
Thanks Hak5, Meow!
30 seconds into the video and I was on the checkout page. Thanks for spot lighting this!
I have this, and the major issue is it's not long enough. Cards generally go 1.2 times their length into the reader. This isn't long enough to test most machines, but it is very cool.
30$ what?? Oh god this is a great thing and great price...Take my money
Its garbage. 8mo of wasted product development. It broke 3-days after con.
No real online reviews of this product and it's been several months. If it was that great and worked that well, I would have thought there would be more reviews.
Awsome work! It's so common in Mexico that they use skimmers, so everyone here needs one.
*Awesome
Good interview! ✌️
I was so disappointed to find that they were already sold out on the second day of DEFCON -_-
I gotta mail this guy the Hackers DVD.
Love this product idea. And the price is fantastic for the awesome job .
I dont get it , you guys are the only ones posting videos ?? I haven't found any talks really floating around yet , not even on the official channels... DEF CON... Slackin on they pimpin ? I guess everyone is still recovering , I'm sure there will be, hopefully, a large amount of talks being posted in the coming weeks.. hoping anyway
02:07 He called it Hunter Cat because... Meow Meow.
Great idea.
Lol the poor dude was so uncomfortable at the end, but thats a really good idea
Seems cool but don't some cc machines pull cards in?
great, another EDC item for my kit.
This is technology that needs to be embedded in every atm machine. Maybe a modified credit card issued by the credit card companies containing some of the technology and the rest including the watch battery embedded into the atm machine. This should be standard.
Website says 29.90 but checkout says 35.00... and 40.00 after shipping. Product looks nice, but website? - not so much.
Definitely picking one up, too useful😏
You shouldn't say finding atm skimmers if you don't actually find them.
Is it just me or anyone else automatically hit like on all Hak5 vids lol
Dallas Kappel basically do it cuz good content
Cool! There's no reason for all business owners, management, employee and grandma, as well as security techs to not have one of these. This is a great and simple tool that potential could be used to provide Security Services for those that are too lazy/busy to do it themselves.
Thank you Salvador!
Awesome bit of kit and such a bargain. £20 in England.
Awesome !
As of 3/14/2020, the Huntercat web site is clueless and the order page generates an error 404. Shannon? What happened?
Great thing for ATM keepers, can help decrease the amount of affected machines.
I thought that all the latest machines (but probably not in every US city yet) took the full card in, rotated it by 90 degrees internally and then read the card. That blocks pretty much all skimmers.
Well it does not block the fake ATM machines (which is a type of skimmer), dropped off from the back of a truck, where it reads the strip, photographs both sides of the card and after you type in a pin code reports that the network has gone down, and ejects your card. Where they are placed in front of an existing machines or stand alone.
Never seen a US ATM that rotates a card. Never seen a US gas station pump that rotates cards, and don't expect they will upgrade those for ten years.
Or
like in europe switch to chip and go away from the magnetic strip.
Are magnet strip still widely in use? That technology is broken for more than a decade now!
I happened to have my card skimmed and they went crazy with it this week... Really wanted to order a few of these but their site is have technical difficulties. Shot them an email either way. For the price, everyone should have one
*is having
6:26 "Trust what ? Lady, I just made this device because I trust nothing and nobody" :))
hahahaha, indeed. Though I have to admit, I had trouble understanding her when she said this in a different video... luckily, I saw it on screen, and then now I understand. :)
@Shannon Morse I love that shirt.
No one has posted a video yet of this actually working on a skimmer unit 🤦♂️
I have a bad feeling that skimmer pirates are going to target him for this and try to take him out.
I assume this wouldnt work on machines that pull your card in
Credit cards should have this detector built-in
Integrate a virtual card with this. I'd buy.
I’m not english, could you tell me what is it? I don’t understand
Mag "stripe" nice.
Anyone able to order it? looks like the website is down.
But magstripe is dead... In Iceland...
Or Australia
Is there anything for beginners at Defcon 27
It’s not really noob oriented
Would a Bluetooth jammer also work? I know there's apps in android store and all they do is detect Bluetooth signals the skimmer uses to send the data
A bluetooth jammer would only prevent the bad guy from getting the information wirelessly while the jammer is waorking but the skimmer already has the information. So that doesn't work
How common is it for skimmers to use bluetooth. I thought it was more of a dead drop situation.
El Gee Seems pretty bad to use Bluetooth.. Gotta get real close.. But maybe the skimmer people just switched the SD card with a Bluetooth card because Bluetooth? No idea.
Oh God how long before someone reverse engineer it,and use it for bad bad intentions,,but cool I'll get one just to test it and see what's it made of...
WHAT IS THAT INTRO MUSIC??
But the skimmer physically protrudes from the ATM doesn't it ? That should give it away...take a hammer and hack it off hahaha
Plzz indonesian subtitle
Was his email salmg@ or salmz @ hard to hear it, and closed captions (English auto-generated) was getting a lot of what he was saying wrong
Radioactive Vidz try his Twitter it’s linked in the description
Thats a good point what about NFC wireless sticker on an ATM that can read your card!?!?
Here is an question, How do you detect the "in line" skimmers that sometimes get installed into fuel pumps and other like devices?
To who tagged me in a response, The devices I was referring to plugs into the data line from the reader itself and copies what data is sent, This device from my understand actually detects extra devices that are sometimes placed on the face of a device not "hotwired" on it's internals. If it is connected to data lines it does not add a read head to the reader that this can detect from the face value of the detector.
Call the credit card company, not the police. Credit card companies pay good $$ for some compromised machines
Can you elaborate? Are you only talking about bank ATMs?
Uh, it says they are $29.90 on the landing page and the checkout is charging $35.00+shipping.
It was the pre-sale price
@@xxronvel the price was just quoted in this video as $30 and it was released today.
@@ViolentOrchid Just saying. I can control neither when the record videos nor when they release them and I do not maintain the webpage.
Is too suspicious
How much $?
$30-$35
If I had to describe the video with only two characters: \ \
I dont get it
escape character?
@@bayzed yea but why would you describe a video with a comment(//)
@@Lolo5 no idea what that dude wants to say
Why is he selling it for so low. He could easily get $50 a pop for these ... you know what let me not complain $30 is fine!!!
He's smart. Going for quantity of sale rather than a high amount for each product sold. Making it affordable generally means more consumers.
Instead of it being a bigger decision and more likely only being bought by folks really interested in security or in the IT related fields, at a lower price, it's more likely to be bought by a more common person who is worried about losing their money to skimmers. It's better to have more people using it than just preaching to the chore. $50 is a big deal. Skimmers are also a much bigger issue in 3rd world and/or "2nd" world countries than 1st world. $50 is out of range price wise.
35
And... the website returns 503
Can't update your cart, you have to order the first time or get multiples.
The end is so cringey
What's the cost if you damage an ATM with this device?
$0 - you walk the F away and put the card in your pocket....go in report the machine is broke as a good customer and do your financial business elsewhere. As far as I'm concerned the banks and gas stations need to do better due diligence to ensure the consumer doesn't have to worry about this crap. The designers of the ATM/Pumps need to rethink their design too. I don't have a better solution, but it's not my job to come up with one either...that's their job! All that said, I highly doubt this device would damage a machine....but I guess it's possible.
How are you suppose to damage the ATM with it?
@@walkinmn if you can reverse the charge on the pins of the reader you might fry the reader itself. Boom thats how it will break it
@@dummypg6129 Not sure if possible without breaking the hunter cat too, but in any case you're trying to do some damage and it's not the fault of the card and if that's your goal you probably can do that with other means easier
can you hack the original atm with that :p
wo
$30 USD for something like this is wayyy to much IMO. If i was thin like a credit card and could fit in my wallet $30 would be a fine price.
worst shop EVER
What's funny is that it's also not good for colorblind people. lol crap.
But, what about it reading 2 heads. In a typical modern POS terminal, you have 2 mag heads. Not 1. So he is incorrect. They have one on either side for people that insert their cards various ways. There should not be 2 heads on one side though. That is correct.
It only catches mag heads. Not any of the inline skimmers similar to what is on gas station pumps.
He means layered.