• XSS.stack #1 – первый литературный журнал от юзеров форума

Contactless Visa attack

Отслеживать
lollyfun сказал(а):
Have you tried to translate the news into a language that you understand? I'm not sure if the group of scientists who developed this attack intends to put the application on the play market ?
I asked if some blackhat has developed the app and exploited the vunerability. I wasn't asking a group of scientist to share it with me.
 
cashearner сказал(а):
I asked if some blackhat has developed the app and exploited the vunerability. I wasn't asking a group of scientist to share it with me.
The application was developed by a group of scientists and is NOT publicly available. Scientists just published a report that they developed this attack. Use a translator, or better learn Russian ?
 
Looks like a normal relay attack where the phone app forwards communication to the POS. Contactless cards shit out all sorts of data over NFC (card number, holder, exp date...). It shouldn't be hard to write only issue I see is the fact that you would need a low level access to the phone NFC chip to forward the APDUs.
 
cashearner сказал(а):
Is there anyone that has this app or can make this kind of attack?
this app is not strange to have in the play market. when you put the card to the phone you get all the data even the cvc code but you need the pin code from the card.
P. s I tried to do this and most of the apps for this are paid(
 
admin


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх