Cybercriminals Innovate Carding Tactics, Exploit Mobile Wallets for Profit
Krebs on Security
|
Contributed by: Drex DeFord
Summary
The resurgence of carding, the illicit practice of stealing and selling payment card data, is being driven by innovative cybercriminal tactics, particularly from China, that have adapted to circumvent security measures associated with chip-based cards. Phishing schemes have evolved to send convincing messages that lure victims into revealing their card information and one-time passcodes, which criminals then use to link stolen data to mobile wallets compatible with major platforms like Apple and Google. These operations are highly organized, with criminals utilizing tutorials and bulk sales strategies to maximize profits, while new technologies such as "ghost tap" facilitate transactions without requiring physical access to users' devices, complicating detection and prevention efforts.