- rexfeatures_254189e[1].jpg (300.99 KiB) Viewed 2514 times
Got a credit card equipped with a contactless payment chip? Then watch out next time someone bumps into you in the street - they may have just mugged you with an app.
Contactless cards use near field communications (NFC) chips to exchange your payment details with a merchant's till, and some smartphones also come equipped with NFC chips to let you use them as a wallet. Now security researcher Thomas Skora has written an app that turns any NFC phone into a reader and successfully read card numbers, expiry dates, transactions and merchant IDs from German credit cards.
The app, called paycardreader, was removed from the Google Play store yesterday, but Skora has also placed the source code on GitHub, a code-sharing website, and says the app doesn't actually save the swiped data, it just displays it.
It is possible that more malicious app developers could use similar methods to actively steal data though - an investigation by Channel 4 television in the UK earlier this year revealed it was possible to swipe details via a phone and use them to make purchases on Amazon.