Zombie Card Attack Revives Expired Visa Cards for Contactless Payments
Researchers at the University of Massachusetts Amherst have demonstrated a novel attack, dubbed "Zombie Card," that can revive expired Visa contactless credit…
Tag: EMV
Visa Faces Zombie Card Vulnerability in Contactless Payments
Visa's EMV contactless kernel (Kernel 3) is vulnerable to the Zombie Card attack, which allows expired cards to be revived for transactions…
Mastercard Kernel 2 Resists Zombie Card Attack
Mastercard's EMV contactless kernel (Kernel 2) includes a consistency check between the two expiry representations, causing a mismatch to be treated as…
American Express Kernel 4 Blocks Zombie Card Modification
American Express's EMV contactless kernel (Kernel 4) binds the expiration date into static data covered by offline data authentication, producing a hash…
Discover Kernel 6 Resists Zombie Card Attack
Discover's EMV contactless kernel (Kernel 6) uses Combined Dynamic Data Authentication, which binds card-returned TLV objects into the verified transaction hash. Modified…
EMVCo No Public Response to Zombie Card Findings
EMVCo, the body that manages EMV specifications, has not published any advisory or specification bulletin regarding the Zombie Card attack as of…