• Home
  • Videos
  • Contact
  • Subscribe to Newsletter
  • Subscribe to Re:ID Magazine
  • Twitter
  • RSS
SecureIDNews
  • Markets »
  • Corporate
  • Education
  • Financial
  • Government
  • Health
  • Transit
  • Technologies »
  • Biometrics
  • Contactless
  • Digital ID
  • NFC
  • RFID
  • Smart Cards

Time: 0 :0

You are here:

  • Home
  • Will NFC trials at Olympics draw wallet hackers?

Will NFC trials at Olympics draw wallet hackers?

09 July, 2012

By: Ryan Clary

category: Financial, NFC

0

The prevalence of NFC payments at this summer’s Olympics in London may draw the attention of thieves using “fuzz” attacks on mobile devices, according to McAfee.

London will serve as a major test ground this summer for NFC payments. Samsung and Visa are piloting the technology with Olympic athletes using Galaxy SIII phones, and it has been reported that Google will use the event for the UK launch of Google Wallet. While Google’s PIN hack scare earlier this year has been taken care of, that still leaves another trick that thieves could use to access information on mobile phones: “fuzzing.”

According McAfee, a fuzz attack targets the mobile device’s OS and its NFC-handling libraries. Fuzzing involves feeding corrupt or damaged data to an app on a mobile device to discover vulnerabilities. According to McAfee, this can be accomplished in several ways, including text messages and now NFC tags.

The latter route has been pioneered by researcher Collin Mulliner, who has updated his NFC fuzzing software for Android devices, enabling him to feed crafted or damaged NFC tags to an Android phone’s library and then capture any crashes or code-execution opportunities, according to McAfee.

Theoretically, a thief could get his hands on a Samsung Galaxy SIII when it hits stores later this week and use Mulliner’s technology to find vulnerabilities on the phone that would enable them to steal credit card information from other Galaxy SIII’s, should he find any exploitable weaknesses, according to McAfee.

Read more here.


Tags: Handsets, Mobile Payments, NFC, Payments, Tags and Posters

recommend to friends

Related News

Future of NFC greater than just payments

20 May, 2013

OSPT Alliance releases CIPURSE open security standards for NFC phones

04 May, 2013

Spring 2013 Regarding ID Magazine available via interactive PDF viewer

29 April, 2013

Frost & Sullivan: The three-headed monster of the smart card industry

29 April, 2013

SecureIDNews
BACK TO TOP

re:ID Magazine



Read current issue online

CR80News Magazine



Read current issue online

Questions, Tips, & Comments

Name:

Email:

Message:

Twitter feed

Follow on Twitter
  • About
  • Advertise
  • Store
  • re:ID
  • Subscribe
  • Twitter
  • RSS

© 2013-2014 AVISIAN Publishing. All rights reserved. info@avisian.com

Close

Enter the site

Login

Password

Remember me

Forgot password?

Login
Skip to toolbar
    • WordPress.org
    • Documentation
    • Support Forums
    • Feedback
Log Out