Examiner les modifications individuelles

'Using nothing more than guesswork, hackers can figure out all of the details on your credit card in just six seconds.<br>This includes the card number, expiration date, and the security code for any Visa credit or debit card.<br>Hackers can automatically generate variations of the security data and try them on multiple websites until they get a 'hit,' and experts warn such an attack is 'frighteningly easy' to carry out.<br> Using nothing more than guesswork, hackers can figure out all of the details on your credit card in just six seconds.<br><br>This includes the card number, expiration date, and the security code for any Visa credit or debit card. Stock image <br> HOW TO MINIMIZE IMPACT OF A CREDIT CARD HACK According to the researchers, there's no 'magic bullet' against these types of attacks.<br>Instead, customers should take steps to minimize the impacts of such an attack in case they become a target.<br>Dr Martin Emms, of Newcastle University, recommends using just one card for online payments, and keeping the spending limit as low as possible.<br>For a bank card, the expert says you should keep the available funds at a minimum, and transfer money over when necessary.<br><br> <br>On top of this, the researcher says card holders should be 'vigilant' with their statements and balance to look out for any unusual activity. <br> adverts.addToArray("pos":"mpu_factbox")Advertisement<br><br>In a new study, published to the journal IEEE Security & Privacy, researchers investigated an attack known as the Distributed Guessing Attack, which is thought to be responsible for the recent Tesco cyberattack, used to defraud customers of millions of dollars last month.<br>This can get past all of the security features that are set up in order to block online fraud, and according to the team from Newcastle University, it is 'frighteningly easy if you have a laptop and an internet connection.'<br>In a Distributed Guessing Attack, hackers make many attempts using automatically and systematically generated variations of [https://www.homeclick.com/search.aspx?search=security%20data security data] across multiple websites.<br>Once they get a 'hit,' which can happen within seconds, they can then verify the data.<br>According to the team, the study revealed a major flaw within the Visa payment system: neither the network nor the banks were able to detect the attackers, despite multiple invalid attempts.<br>And with the holiday shopping season underway, they say the risk Is beltactive legit ([https://www.validcc.site/ www.Validcc.site]) at its highest.<br>'This sort of attack exploits two weaknesses that on their own are not too severe but when used together, present a serious risk to the whole payment system,' says lead author Mohammed Ali, a PhD student in Newcastle University's School of Computing Science.<br> RELATED ARTICLES <br><br><br><br>Share this article<br>Share<br>44 shares<br><br><br>As the current payment system does not detect the attempts from the different websites, the hackers are able to carry out unlimited guesses for each data field, the Ali explains.<br>Each site allows a given number of attempts, typically 10 or 20, and hackers can use these up until they get the right combination.<br>Along with this, different websites ask for different variations on the data fields to validate online purchases, meaning 'it's quite easy to build up the information and piece it together like a jigsaw,' Ali explained.<br> HOW A DISTRIBUTED GUESSING ATTACK WORKS The study revealed a major flaw within the Visa payment system: neither the network nor the banks were able to detect the attackers, despite multiple invalid attempts.<br>MasterCard's centralized network, on the other hand, was able to detect the guessing attack after less than 10 attempts, even when distributed across multiple networks, Ali explains. <br>But, these attacks are able to obtain information one field at a time, as different online merchants ask for different information.  <br>'Most hackers will have got hold of valid card numbers as a starting point, but even without that it's relatively easy to generate variations of card numbers and automatically send them out across numerous websites to validate them,' Ali says.<br>'The next step is the expiry date.<br><br>Banks typically issue cards that are valid for 60 months so guessing the date takes at most 60 attempts.<br>'The CVV is your last barrier and theoretically only the card holder has that piece of information - it isn't stored anywhere else.<br>'But guessing this three-digit number takes fewer than 1,000 attempts.<br><br>Spread this out over 1,000 websites and one will come back verified within a couple of seconds. And there you have it - all the data you need to hack the account.'<br> adverts.addToArray("pos":"mpu_factbox")Advertisement<br><br>'The unlimited guesses, when combined with the variations in the payment data fields make it frighteningly easy for attackers to generate all the card details one field at a time,' the researcher says.<br>'Each generated card field can be used in succession to generate the next field and so on. <br>'If the hits are spread across enough websites then a positive response to each question can be received within two seconds - just like any online payment.<br>'So even starting with no details at all other than the first six digits - which tell you the bank and card type and so are the same for every card from a single provider - a hacker can obtain the three essential pieces of information to make an online purchases within as little as six seconds.'<br>While online payments require the customer to provide that only the cardholder would know, the researchers say it is simple to carry out ‘jigsaw' identification unless all merchants ask for the same information.<br> Hackers can automatically generate variations of the security data and try them on multiple websites until they get a 'hit,' and experts warn such an attack is 'frighteningly easy' to carry out.<br><br>A stock image is pictured <br>And, there's no sure way to prevent these types of attacks.<br>‘Sadly there's no magic bullet,' says Dr Martin Emms, co-author on the paper.<br>‘But we can all take simple steps to minimize the impact if we do find ourselves of a hack.<br><br>For example, use just one card for online payments and keep the spending limit on that account as low as possible.<br>‘If it's a bank card then keep ready funds to a minimum and transfer over money as you need it.<br>‘And be vigilant, check your statements and balance regularly and watch out for odd payments.<br>‘However the only sure way of not being hacked is to keep your money in the mattress and that's not something I'd recommend.' <br><br><br>'