Android app swipes contactless credit card details

254189e

Got a credit card equipped with a contactless payment chip? Then watch out next time someone bumps into you in the street – they may have just mugged you with an app.

Contactless cards use near field communications (NFC) chips to exchange your payment details with a merchant’s till, and some smartphones also come equipped with NFC chips to let you use them as a wallet. Now security researcher Thomas Skora has written an app that turns any NFC phone into a reader and successfully read card numbers, expiry dates, transactions and merchant IDs from German credit cards.

The app, called paycardreader, was removed from the Google Play store yesterday, but Skora has also placed the source code on GitHub, a code-sharing website, and says the app doesn’t actually save the swiped data, it just displays it.

It is possible that more malicious app developers could use similar methods to actively steal data though – an investigation by Channel 4 television in the UK earlier this year revealed it was possible to swipe details via a phone and use them to make purchases on Amazon.


Blowfish12@2012 blowfish12.tk Author: Sudharsun. P. R.

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s