Directory of RSS feeds
Statistics

RSS feeds in the directory: 374

Added today: 0

Added yesterday: 0

Advertising

Hi-Tech / Hardware

A vulnerability of Maestro and Mastercard cards was found that allows you to pay via a smartphone without a PIN code

Ferra.ru 31.08.2021 at 05:31

Analytical reviews of computers and accessories, news and prices computer market.

Kaspersky Lab published details of the incident with the cards in its blog on Habra.

Last week, according to the author of the material, employees of the Swiss Higher Technical School of Zurich presented the results of a card security study at the Usenix conference. Among the examples of the vulnerability were Maestro and Mastercard cards.

In order to pay for a purchase without entering a PIN code, it was necessary to perform two simple operations. First, transfer all the information about the card to your smartphone by attaching it to the card itself, and then move this data to another phone. After that, everything was easily paid for through the second device, which had to be attached to the terminal. You didn't need to enter a PIN code either. The specialists even bypassed the payment amount limit and made a purchase for 400 francs (approximately 32,070 rubles). Such an attack is possible with both Maestro and Mastercard.

According to experts, the terminal worked with cards in the same way as with a Visa card. That is, the device thought that it was reading a Visa card.

It is also interesting that all operations for the owner of the terminal look like a payment with a smartphone, and not as a fraud.