Hidden Security Threats of Kiosks: Online Only
Call credit union kiosks the equipment of the moment: vendors and analysts seem buoyant about the market opportunity as financial institutions continue to cut staff to better control expenses and, at the same time, iPads and Kindle Fires and still other tablets have trained a nation in how to use interactive screens.
Install lobby kiosks and, suddenly, members can easily check account balances and apply for loans. Would-be employees can apply for jobs. And just about anybody can get answers to common questions such as where branches are and what hours the credit union is open.
A frightening reality, said Jack Koziol, a director at InfoSec Institute, is that many, many kiosks remain vulnerable to attack via built-in USB ports, the route that undid the TJX kiosks. But it could be much uglier still at a financial institution. “With a USB switchblade” - a simple plug in device well understood by cyber crooks that lets them run unauthorized software – “hackers could get access to user passwords and login credentials,” said Koziol.
That is just the start of the troubles, however.