'Firstly, the current online payment system does not detect multiple invalid payment requests from different websites.

'This sort of attack exploits two weaknesses that on their own are not too severe but when used together, present a serious risk to the whole payment system,' explains Mohammed Ali, a PhD student in Newcastle University's School of Computing Science and lead author on the paper. Investigators believe this guessing attack method is likely to have been used in the recent Tesco cyberattack which the Newcastle team describe as 'frighteningly easy if you have a laptop and an internet connection.'Īnd they say the risk is greatest at this time of year when so many of us are purchasing Christmas presents online.

Research published in the academic journal IEEE Security & Privacy, shows how the so-called Distributed Guessing Attack is able to circumvent all the security features put in place to protect online payments from fraud.Įxposing the flaws in the VISA payment system, the team from Newcastle University, UK, found neither the network nor the banks were able to detect attackers making multiple, invalid attempts to get payment card data.īy automatically and systematically generating different variations of the cards security data and firing it at multiple websites, within seconds hackers are able to get a 'hit' and verify all the necessary security data.

Ultrasoft money crack