Credit Card Skimming and Pin Harvesting in an EMV World

Utrecht, The Netherlands, 26 April 2011 – On the 17th till the 20th of May, the Grand Krasnapolsky in Amsterdam will be home to the second annual Hack In The Box deep knowledge security conference, HITB2011AMS. In addition to bringing together a unique mix of security professionals, researchers, law enforcement and members of the hacker underground, this year’s conference also includes a new presentation on EMV security issues. A joint effort between Europay, MasterCard and Visa to ensure global interoperability so that Visa and MasterCard cards can continue to be accepted everywhere.

The EMV global standard for electronic payments is widely used for inter-operation between chip equipped credit/debit cards, Point of Sales devices and ATMs. Following the trail of the serious vulnerabilities published by Murdoch and Drimer’s team at Cambridge University regarding the usage of stolen cards, Daniele Bianco from Inverse Path and Adam Laurie, an independent network security researcher based in the UK, explore the feasibility of skimming and cloning in the context of POS usage.

Bianco and Laurie will go into in-depth detail, analyzing EMV flaws in PIN protection and will also illustrate skimming prototypes that can be covertly used to harvest credit card information as well as PIN numbers regardless the type/configuration of the card.

These attacks are believed to be unreleased so far to the public (which however does not mean fraudster are not already exploiting them) and are effective in bypassing existing protections and mode of operations. Their presentation will also be further enhanced with hardware and video demonstrations of the attacks. For further event details please see:

http://conference.hitb.nl/hitbsecconf2011ams/

HITBSecConf is run as a community-backed not-for-profit effort endorsed by the Malaysian Communications and Multimedia Commission (MCMC), Malaysian National Computer Confederation (MNCC), Multimedia Development Corporation (MDeC) and MSC Malaysia.

Hack In The Box
Suite 26.3, Level 26,
Menara IMC, No 8 Jalan Sultan Ismail,
50250 Kuala Lumpur, Malaysia

Tel: +603-20394724
Fax: +603-20318359

This release was published on openPR.