How Does Distributed Guessing Attacks Work?Īt the heart of the issue is the fact that an online Visa payment system allows a maximum of 20 attempts per card in order to guess credentials like card numbers, expiration dates, and CVV numbers. When this technique is executed properly, a hacker can recover a credit card's security information in as little as six seconds. To exploit this vulnerability, hackers can use a technique called Distributed Guessing Attack (which is similar to a DDoS attack). The vulnerability lies in the fact that the Visa payment system allows users to attempt all possible permutations and combinations of expiration dates and CVV numbers across hundreds of websites. What's worse, the vulnerability lies in the way merchants accept online payments, meaning that there's little the average Visa card customer can do to protect themselves.
Visa customers have reason to worry as a new research paper in the academic journal IEEE Security & Privacy revealed a weak spot in online credit card security that allows hackers virtually unlimited hacking attempts at Visa accounts.
0 kommentar(er)
