Categories: FinanceNews

It Takes Six Seconds To Guess A Visa Payment Card’s Information

Criminals have come up with some very creative ways to obtain credit card information over the past few years. Most of their attack vectors hinge on using social engineering, brute forcing, or malware. But a new hack against the Visa network can “guess” complete card details in six seconds or less–a disturbing development, although it may not be the most practical solution.

A Scary New Way of Obtaining Credit Card Information

By using this particular hack, criminals can obtain not only the card number but also the expiry date and CVV code of any Visa payment card in circulation. This attack goes by the name of “Distributed Guess Attack”, which is thoroughly explained in a research paper

. It is very likely that this attack vector was abused during the recent Tesco bank hack, although that has not been officially confirmed.

The payment card ecosystem as we know it comes with many flaws, some of which are more obvious than others. Different online merchants can request data sets when processing a payment request. In most cases, this requires the card number, expiry date, and CVV value.  Others may ask for more details, such as an address.

It is possible, however, for an assailant to submit multiple invalid payment requests for the same card in quick succession. Contrary to what people believe, this type of behavior is not detected and will not “flag” the card for improper behavior. In fact, this allows hackers to complete an indefinite amount of guesses as to which card number or expiration date is being used.



Related Post

Combining these two factors leads to an unlikely scenario in which a criminal can extract full card information by automatically generating and verifying different card information combinations. It takes all but six seconds to fully compile card information, even when different information is taken from different websites or retailers.

Interestingly enough, this method of attack will only affect Visa cards, whereas MasterCard is unaffected. In fact, MasterCard designed tools to detect such erratic behavior. It is quite strange to find out that Visa does not have such a feature, despite their dominant market position. Then again, large companies seldom operate with the consumer’s interest at heart.

Granted, pulling off such an attack requires a bit of coding. A bot that can automate these guesses will make quick work of possible combinations for individual cards, resulting in the average time of six seconds to crack the details.  In fact, once a criminal knows the card number, it is only a matter of guessing the expiration date. Most cards are only valid for five years, limiting the range somewhat.

If you liked this article, follow us on Twitter @themerklenews and make sure to subscribe to our newsletter to receive the latest bitcoin, cryptocurrency, and technology news.

JP Buntinx

JP Buntinx is a FinTech and Bitcoin enthusiast living in Belgium. His passion for finance and technology made him one of the world's leading freelance Bitcoin writers, and he aims to achieve the same level of respect in the FinTech sector.

Share
Published by
JP Buntinx

Recent Posts

Best Altcoins to Invest in Today: Qubetics Sets the Stage for Blockchain’s Future as Bitcoin Hits $108K and Litecoin Soars

The cryptocurrency world has always been a hotbed of innovation, attracting both seasoned investors and…

11 mins ago

Dogecoin Millionaire Predicts This Undervalued Altcoin Could Match DOGE’s 2021 Gains

Dogecoin's 2021 rally was a historic one, turning ordinary investors into overnight millionaires. This magnificent…

42 mins ago

Qubetics Presale Skyrockets to $7.5M as XRP and Arbitrum Lead Best Altcoins for Exponential Returns

The crypto market is always evolving, with big names like Bitcoin and Ethereum leading the…

2 hours ago

Over 300K Users Actively Mine Crypto On BlockDAG’s X1 Miner App While BNB Bulls Eye $3K; What’s XRP’s Price Target?

The crypto market is ablaze with excitement as altcoins like XRP and BNB make major…

2 hours ago

Best Crypto Presale To Buy Now: Rollblock Delivers For Holders With New License, Record Sign Ups and 7000+ Games

Rollblock is quickly becoming the best crypto presale to buy, delivering unmatched value for its…

5 hours ago

Polkadot And Uniswap Gearing For Post-Christmas Jump As Rollblock Raises $7.4 Million in Presale

While Rollblock's continues its crypto presale, with its value increasing regularly, Polkadot (DOT) and Uniswap…

6 hours ago