203 lines
8.4 KiB
Plaintext
203 lines
8.4 KiB
Plaintext
|
+-------------------------------+
|
|||
|
|
| |
|
|||
|
|
| A. T. M. Fraud Made Easy |
|
|||
|
|
| |
|
|||
|
|
| summary and research by |
|
|||
|
|
| Count Zero |
|
|||
|
|
| |
|
|||
|
|
| (A CHiNA Info-Net Prod) |
|
|||
|
|
| |
|
|||
|
|
+-------------------------------+
|
|||
|
|
|
|||
|
|
Have you ever looked longingly upon the sight of your local PULSE machine
|
|||
|
|
and thought, "There must be some way that I can make some money REAL easy
|
|||
|
|
here."?
|
|||
|
|
|
|||
|
|
Well, there is. But it won't be easy. Protection methods can be overcome,
|
|||
|
|
but the technology involved must be understood IN ITS ENTIRETY before an
|
|||
|
|
[PAUSE] attempt at illegal access is to be made. There are hundreds of people,
|
|||
|
|
guests of the state, that figured their plans infallible, only to fall
|
|||
|
|
victim to a well-hidden camera.
|
|||
|
|
|
|||
|
|
This article will not be a lesson on HOW to break into the machine, it is
|
|||
|
|
merely a summary of the operations involved with a normal ATM transaction.
|
|||
|
|
This information is being presented on a "for information's sake"-only
|
|||
|
|
basis. I, Count Zero, do not promote nor remotely condone any illegal
|
|||
|
|
acts of any sort. So there.
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
I. MAGNETIC STRIP FORMAT
|
|||
|
|
|
|||
|
|
This would seem to be the most efficient method of trying to access illegal
|
|||
|
|
sums of cash. You could:
|
|||
|
|
|
|||
|
|
a. steal somebody's card and PIN code
|
|||
|
|
b. synthesize a card
|
|||
|
|
c. attempt to "jackpot" the system
|
|||
|
|
|
|||
|
|
We will only look at option B. As "A" is up to your own devices and "C" has
|
|||
|
|
several good text files written about it already. So "B" it is.
|
|||
|
|
|
|||
|
|
[PAUSE] Let's look at the format of the data written to the magnetic strips. This
|
|||
|
|
has been taken from a recent HARTWELL, INC manual.
|
|||
|
|
|
|||
|
|
[ XX XX XX XX XX XX XX XX ] [ YYYY ] [ - 20 CHARS - ] [ ZZ ZZ ZZ ] [ CC CC ]
|
|||
|
|
\-----------------------/ \------/ \--------------/ \----------/ \-------/
|
|||
|
|
Your individual acct. PIN Name of card Bank route CHKSUM
|
|||
|
|
number/serial code Code issuee code/rem.
|
|||
|
|
access #
|
|||
|
|
|
|||
|
|
For validation, each entry is written twice but not written here for
|
|||
|
|
ease of typing. But it is repeated in the form of:
|
|||
|
|
"ACCT NUM" "ACCT NUM" "PIN CODE" "PIN CODE" etc...
|
|||
|
|
|
|||
|
|
These codes may be examined by building a simple code-reader as many
|
|||
|
|
have done which can be easily interfaced to your IBM-PC. Full plans
|
|||
|
|
to be put into a future CHiNA newsletter.
|
|||
|
|
|
|||
|
|
If you were to attempt to write a magnetic strip or change a currently
|
|||
|
|
existing one, you would need to be using a head-write circuit based on
|
|||
|
|
the popular Motorola BCX119221-A...C series of head control chips.
|
|||
|
|
|
|||
|
|
NOTE: Make sure to change the last 2 values! They constitute the
|
|||
|
|
checksum of the entry.
|
|||
|
|
Merely add all existing characters written (only the first entry, not both
|
|||
|
|
[PAUSE] of them) using the following chart:
|
|||
|
|
|
|||
|
|
CHARACTER VALUE
|
|||
|
|
--------------------------------
|
|||
|
|
0..9 0..9
|
|||
|
|
A..Z 10..36
|
|||
|
|
EOL 37
|
|||
|
|
EOT 38
|
|||
|
|
CLR 39
|
|||
|
|
HMX 40
|
|||
|
|
PTT 41
|
|||
|
|
RIA-1 42
|
|||
|
|
RIA-2 43
|
|||
|
|
|
|||
|
|
I doubt anyone in the communications biz needs an explanation of these terms
|
|||
|
|
so I'll move on.
|
|||
|
|
|
|||
|
|
|
|||
|
|
II. ATM HARDWARE
|
|||
|
|
|
|||
|
|
Usually consists of:
|
|||
|
|
|
|||
|
|
------------------------------------
|
|||
|
|
| |
|
|||
|
|
[PAUSE] \-----\ | B |
|
|||
|
|
| A | | |
|
|||
|
|
\-----\ ------------------------------------
|
|||
|
|
| |
|
|||
|
|
| ----------- /---/ E |
|
|||
|
|
| / / / / ---- |
|
|||
|
|
| / C / / D / F |
|
|||
|
|
| / / / / ---- |
|
|||
|
|
| ------------ /---/ |
|
|||
|
|
| |
|
|||
|
|
------------------------------------
|
|||
|
|
|
|||
|
|
|
|||
|
|
A. Camera Mount
|
|||
|
|
B. Hidden Voice-Activated recorder & printout link
|
|||
|
|
C. Display Monitor
|
|||
|
|
D. Options buttons
|
|||
|
|
E. Card Slot
|
|||
|
|
F. Receipt Slot
|
|||
|
|
|
|||
|
|
Your machine may vary slightly. But the concept will almost always hold true.
|
|||
|
|
Simple rules for each.
|
|||
|
|
|
|||
|
|
A. Wear a paper bag or mask. See also Part II A
|
|||
|
|
[PAUSE] B. Do NOT speak. This is the most crucial part! See also Part II A
|
|||
|
|
C. Nothing
|
|||
|
|
D. Wear gloves
|
|||
|
|
E. See Part I
|
|||
|
|
F. TAKE YOUR RECEIPT AND BURN IT!!
|
|||
|
|
|
|||
|
|
One of the neat flaws in many machines made prior to 1989 involved the
|
|||
|
|
use of the "CANCEL" button. This button was made to be pressed when the
|
|||
|
|
user decided, at any time during the transaction, that he didn't wish
|
|||
|
|
to continue. The display would jump immediately to:
|
|||
|
|
|
|||
|
|
"TRANSACTION CANCELLED - CHOOSE ANOTHER?"
|
|||
|
|
|
|||
|
|
This was all well and good, but the machines did not disable this feature
|
|||
|
|
between the time your cash was dispensed and you were prompted for your
|
|||
|
|
next activity. In effect, you could push the "CANCEL" button after your
|
|||
|
|
money has been withdrawn and it would not be added to your account record!
|
|||
|
|
|
|||
|
|
THIS STILL WORKS IN MANY PLACES! OVER 85% OF ALL MACHINES MADE BEFORE MAR.
|
|||
|
|
1989
|
|||
|
|
STILL HAVE NOT BEEN UPGRADED.
|
|||
|
|
|
|||
|
|
Although most machines of that period would only work if you were withdrawing
|
|||
|
|
amounts larger than $20 (usually $25 is the next possible choice!)
|
|||
|
|
[PAUSE] This is ideal if you are using another's card!
|
|||
|
|
|
|||
|
|
|
|||
|
|
II A. CAMERA/SOUND HARDWARE
|
|||
|
|
|
|||
|
|
You can go other routes when dealing with camera systems. You do not have
|
|||
|
|
to wear a bag on your head (unless the cosmetic improvement is quite large)
|
|||
|
|
Thin alloy metal such as common aluminum/tin foil, which are full of
|
|||
|
|
impurities,
|
|||
|
|
react in a bizarre way when photographed through the special lenses that are
|
|||
|
|
commonly used. The effect is to "blur" or "bleed" the image, rendering it
|
|||
|
|
indestinguishable from an accident in your local Sherwin-Williams store.
|
|||
|
|
Most people prefer to make a "headband" of this metal, lined with copper
|
|||
|
|
wire in a sine wave pattern when accosting a machine. You should
|
|||
|
|
seriously consider this possibility!
|
|||
|
|
For further reading on this subject, consult:
|
|||
|
|
|
|||
|
|
BANKER'S WORLD - Apr 1989
|
|||
|
|
"Where Have All the Dollars Gone?"
|
|||
|
|
pp 24-29
|
|||
|
|
|
|||
|
|
P. I. - Apr 1989
|
|||
|
|
"The Last Straw"
|
|||
|
|
pp 37-41 (p 38 in particular has a nice
|
|||
|
|
[PAUSE] diagram. Fig 1)
|
|||
|
|
|
|||
|
|
|
|||
|
|
Sounds, these articles also suggest an indirect method of dealing with the
|
|||
|
|
voice-activated recording device. Oddly, a pure square wave tone (roughly
|
|||
|
|
around 3100 hz) will cause a major screwup in the sound-sensing abilities
|
|||
|
|
of the recorder. It usually will have to be replaced. Suggested volume,
|
|||
|
|
given at 6" range is 8.5+ db. Obviously, anything louder will do.
|
|||
|
|
|
|||
|
|
An interesting side-note is that this has become a past-time of suburban
|
|||
|
|
teenagers!
|
|||
|
|
|
|||
|
|
Well, hope this gets you started! More will be coming in the next
|
|||
|
|
exciting file!
|
|||
|
|
|
|||
|
|
---------------------------> OVER AND OUT! -----------> COUNT ZERO
|
|||
|
|
|
|||
|
|
Another file downloaded from:
|
|||
|
|
|
|||
|
|
!
|
|||
|
|
-$-
|
|||
|
|
! .
|
|||
|
|
/_\ /-o-\ & the Temple of the Screaming Electron
|
|||
|
|
(o..) | * Walnut Creek, California
|
|||
|
|
+ |:| /^\ /~\
|
|||
|
|
! |:|/\ _| |____|:| 2400/1200/300 baud 415-935-5845
|
|||
|
|
/^\ / O |/...\ /_-_\ Jeff Hunter, Sysop
|
|||
|
|
|@ \_| @ /:::::|/|- : -| \
|
|||
|
|
| | | /~ |/| _ | - - - - - - - - - *
|
|||
|
|
|____|/~ @ /~\ |/|_(_)_| Aaaaaeeeeeeeeeeeeeeeeee! /
|
|||
|
|
/_______|_|_|/
|
|||
|
|
|
|||
|
|
Specializing in conversations, obscure information, high explosives,
|
|||
|
|
arcane knowledge, political extremism, diversive sexuality,
|
|||
|
|
insane speculation, and wild rumours. An ALL-TEXT BBS.
|
|||
|
|
|
|||
|
|
Full access for first-time callers. We don't want to know who you are,
|
|||
|
|
where you live, or what your phone number is. We are not Big Brother.
|
|||
|
|
|
|||
|
|
"Raw Data for Raw Nerves"
|
|||
|
|
|
|||
|
|
|