Exploiting 0ld Mag stripe information with New technology
Using audio transmission and Bluetooth to spoof magstripe data and perform mass card attacks.
Summary
Magstripe Legacy
Magnetic stripe technology remains in use despite modern alternatives. Private companies, banks, trains, subways, hotels, and schools use magstripe for transactions, access control, and new protocols like MST.
Historical Challenges
Malicious spoofing was historically slow and difficult. Brute force attacks were tedious and time-consuming, making massive attacks impractical.
Modern Attack Feasibility
Technology like Bluetooth makes persistent attacks against multiple readers simultaneously practical. Audio transmission of magstripe data enables fast, easy cross-platform spoofing.
Attack Applications
Attackers can transmit audio spoof information to many readers simultaneously through audio spoofing and Bluetooth. Magstripe jamming against credit card terminals and PoS systems becomes practical. Hotel door locks and tokenization processes are vulnerable to brute force attacks enabled by new technology.
Related talks
Hackers of CypherCon·29 min
The level of human involvement behind RDP brute-force attacks Andréanne Bergeron, Ph.D | CypherCon 6
Security researchers examine technical aspects of The level of human involvement behind RDP brute-force attacks Andréanne Bergeron, Ph.D | CypherCon 6.
IEEE Symposium on Security and Privacy·21 min
Presenters detail vulnerability discovery and exploitation in GenoGuard: Protecting Genomic Data against Brute-Force Attacks.
RSAC Cybersecurity·29 min
Andy Ellis
RSA Conference US 2013 Keynote analyzes Managing Risk with Psychology Instead of Brute Force - Andy Ellis.