{"id":31720,"date":"2014-09-15T09:53:05","date_gmt":"2014-09-15T16:53:05","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=31720"},"modified":"2015-01-28T10:15:39","modified_gmt":"2015-01-28T18:15:39","slug":"iphone-case-atm-pins","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/iphone-case-atm-pins\/","title":{"rendered":"This Simple iPhone Case can be Used to Steal ATM PINs"},"content":{"rendered":"

\"ATM\"
\nIt\u2019s a common wisecrack around the criminal community. This whole stealing ATM PINs thing would be a lot simple if a gadget would just do all the work.<\/p>\n

Sounds like a crazy dream, right?<\/p>\n

After all, what thief wouldn’t love to steal ATM PINs via a handheld device?<\/p>\n

This dream, frighteningly for us, may just come true with what appears to be an ordinary iPhone case.<\/p>\n

It\u2019s called the \u2018FLIR One \u2013 Infrared Accessory\u2019<\/strong> and it fits the Apple iPhone 5 and 5s. The concept behind it is that the infrared camera on the case can pick up thermal heat signatures and translate them into dynamic color images.<\/p>\n

While it\u2019s initially created for security, home repairs and outdoor activities, thieves can use it to pick up the thermal heat signatures left behind after an individual punches in a PIN at the ATM or a bank code at the supermarket.<\/p>\n

So an amateur ATM-code thief can now buy an iPhone case with infrared-scanning capabilities. Thermal imaging technology\u2014normally reserved for military operations and for\u00a0hunting\u2014can be bought from online stores and retailers for just a few hundred dollars.<\/p>\n

With infrared technology, thieves can scan a keypad that you have punched your PIN into. They don\u2019t have to use their hands \u2013 just the infrared accessory on their phones.<\/p>\n

The thermal imaging camera does all the work \u2013 capturing an image of the heat that is left by your fingertips when they touch the buttons to enter the PIN. Using the dynamic color image of the thermal signature, crooks can easily tell the order of the PIN numbers.<\/p>\n

And if you\u2019re wondering if criminals could cause any damage with access to just the PIN and not the physical card, they can! They only require a radio frequency identification scanner<\/a> that can capture your details from your card, even from three feet away.<\/p>\n

Thermal imaging and ATM PIN theft<\/h3>\n

This isn\u2019t the first time thermal imaging has grabbed headlines when it comes to stealing ATM PINs. Research presented at the USENIX Security Symposium in 2011 showcased how thermal imaging has the ability to detect residual heat from keypresses<\/a> unlike traditional video cameras.<\/p>\n

\"Thermal<\/p>\n

Researchers who gave the presentation gathered volunteers to select random PIN numbers on a brushed metal PIN pad and a plastic PIN pad. The researchers found that the plastic PIN pad made it possible to determine the heat signatures of the numbers pressed as well as the number order.<\/p>\n

The research also suggested that the thieves could adopt the use of thermal camera techniques in the future. It is easy for account robbers to hide such gadgets about their person, and they are inexpensive. The FLIR One case for example costs $350<\/a>, which is a small investment for someone keen to access your account, steal your credit card data and find out your security codes.<\/p>\n

How to protect yourself<\/h3>\n

Fortunately, there are some things you can do.<\/p>\n

The design and science guru Mark Rober had made a video, showing how you can easily prevent thieves from using this new strategy to steal your PIN and information.<\/p>\n

After you swipe an ATM card, rest a couple of fingers on other buttons while typing in your code.<\/p>\n

This would leave a signature that even the savviest criminal with the best infrared camera\/accessory won\u2019t be able to detect. It\u2019s all about the buttons you press on the machine.<\/p>\n