Your Expired Visa Card Could Be ‘Zombified’ to Make Contactless Payments
Plus: Apple sends out an “unprecedented” number of spyware warnings, Ukraine hits a Russian ecommerce giant with cyber and drone attacks, and more.
Credit card thieves could exploit "zombified" expired Visa cards to make contactless payments, according to researchers at the University of Massachusetts Amherst. At the Usenix Cybersecurity Conference, the researchers demonstrated that fraudsters could use a man-in-the-middle app to relay the credit card's data through two phones, allowing for contactless payments even if the card has expired.
Visa's authentication flaw for contactless transactions left expired cards vulnerable, as some banks didn't prevent their use. The researchers warned that the cards could be found in trash, enabling fraudsters to drain the account holder's funds.
Written by urgent.news from Wired's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
