Exploiting Visa Contactless Cards: Reviving Expired Cards via NFC Relay Attack

Researchers demonstrated a method to revive expired Visa contactless cards by altering expiration dates via NFC relay attacks, bypassing cryptographic checks. The vulnerability affects specific EMV kernels and highlights weaknesses in expiration date validation across banking systems.

Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchases by rewriting the expiration date a point-of-sale (POS) terminal reads over near-field communication (NFC), without breaking any of the card's cryptography.

The attack, which the researchers named "Zombie Card," requires physical

Read original article