Tencent PC Manager: Targeted by Spark RAT
Tencent PC Manager is a security product that is targeted by the Spark RAT campaign. The malware uses the vulnerable OPSWAT driver…
Tag: security
Mastercard Kernel 2 Resists Zombie Card Attack
Mastercard's EMV contactless kernel (Kernel 2) includes a consistency check between the two expiry representations, causing a mismatch to be treated as…
American Express Kernel 4 Blocks Zombie Card Modification
American Express's EMV contactless kernel (Kernel 4) binds the expiration date into static data covered by offline data authentication, producing a hash…
Discover Kernel 6 Resists Zombie Card Attack
Discover's EMV contactless kernel (Kernel 6) uses Combined Dynamic Data Authentication, which binds card-returned TLV objects into the verified transaction hash. Modified…
EMVCo No Public Response to Zombie Card Findings
EMVCo, the body that manages EMV specifications, has not published any advisory or specification bulletin regarding the Zombie Card attack as of…
SumUp Terminals Used in Zombie Card Testbed
SumUp Solo and SumUp Plus card readers were used in the Zombie Card attack testbed. The terminals did not implement EMV's optional…
SumUp Solo Card Reader Used in Zombie Card Testbed
The SumUp Solo card reader was used in the Zombie Card attack testbed. It lacked EMV's Relay Resistance Protocol, making it susceptible…
SumUp Plus Card Reader Used in Zombie Card Testbed
The SumUp Plus card reader was used in the Zombie Card attack testbed. It lacked EMV's Relay Resistance Protocol, making it susceptible…
Zombie Card Attack Presented at USENIX Security 2026
The Zombie Card attack was presented at the 35th USENIX Security Symposium held in Baltimore from August 12 to 14, 2026. The…
IBM Trusteer: Security Solutions for Financial Institutions
IBM Trusteer provides security solutions to protect against financial fraud and malware, including analysis of banking trojans like GoldDigger.