Updated:05:41 PM CEST Aug,20

NEWS / RSS
CHEATS

REVIEWS

ARTICLES

HARDWARE

DEMOS

FORUMS

LINKS (new)

CONTACT

Please e-mail us if you have news.

Zombie Visa Cards Still Get Approved - tech

(hx) 05:41 PM CEST - Aug,20 2026

UMass Amherst researchers demonstrated a 'Zombie Card' attack that lets expired Visa contactless cards complete real in-store payments.

An NFC man-in-the-middle relay rewrites the expiration date the terminal sees while leaving the card’s cryptography intact.

Visa’s Kernel 3 does not cryptographically bind the terminal-facing and issuer-facing expiry fields, allowing the change to pass.

Mastercard, American Express, and Discover configurations reject the mismatch.

The attack requires physical access to the discarded card plus an open account; some banks approved test transactions up to $500.

last 10 comments:

All comments

Add your comment (free registration required)