If a payment terminal could be forced into servitude as a crude handheld gaming device, what else could it be made to do. Researchers at the Black Hat conference showed just what mischief a commonly used UK PoS terminal could get up to when they inserted a chip-and-pin card crafted with malicious code. That enabled them to install a racing game and play it, using the machine's pin pad and screen. With the same hack, they were able to install a far less whimsical program as well - a Trojan that could record card numbers and PINs, which could be extracted later by inserting another rogue card.
Engadget , Security experts hack payment terminals to steal credit card info, play games, Security experts hack payment terminals to steal credit card info, play games
No comments:
Post a Comment