Skip to main content

Researchers identify ‘brute force’ method of stealing credit card information

A hand on a laptop in a dark surrounding.
Image used with permission by copyright holder
We all know it’s important to be vigilant while shopping online, so that our information isn’t captured for illicit purposes. However, the user’s due diligence is worthless if the retail platform itself has a security flaw — and new research suggests there might be a glaring issue with the way online stores take payment information.

A group of researchers from Newcastle University in the United Kingdom has published a paper that suggests online criminals can use online payment systems from a variety of different sites to figure out a target’s banking information by “brute force.” The researchers suggest that this methodology may have been used to facilitate last month’s attack on Tesco Bank customers.

Recommended Videos

Typically, a website will only allow a user 10 or 20 guesses at any individual field on a payment form, which is enough to prevent attackers from guessing a 16-digit account number. However, different retailers use different systems, meaning that a criminal could cross-reference data from several sites to find out that information, without ever exceeding the number of guesses that would prompt detection.

MasterCard is apparently immune to this kind of attack, because the company detects guesses even when they’re carried out across different websites, according a to a report from security expert Bruce Schneier. However, Visa does not implement the same system.

It’s thought that criminals only need the first six digits of a card number to facilitate this kind of attack — which is worrying, given that those numbers only refer to the bank and card type. With this information in hand, the card’s full number, its expiration date, and its CCV code can apparently be learned in as little as six seconds, giving the culprit everything needed to make fraudulent online purchases.

Brad Jones
Former Digital Trends Contributor
Brad is an English-born writer currently splitting his time between Edinburgh and Pennsylvania. You can find him on Twitter…
Fortnite PC performance: best settings, fps boost, and more
Fortnite man.

Chapter 2 Remix of Fortnite is in full swing, and as you're exploring everything that's new, there's no better time to refresh yourself on the best settings to use for your PC. After all, with higher frame rates come better reaction times for you, giving you a chance of getting that shot off before your opponent, which can sometimes make all the difference.

Fortnite is a slightly more demanding esport than some of its older rivals, but that just means there's more scope for performance improvements if you select the right settings. Here are the most important performance-enhancing tweaks you can make to Fortnite.
The best settings for Fortnite

Read more
Teardown of the M4 Mac mini reveals a huge surprise
The Mac mini up on its side on a desk.

Thanks to a video posted on social media showing the inside of the new Mac mini, we now know it has modular storage and the 256GB base model uses two 128GB chips. This is good news for tech enthusiasts who were disappointed with the M2 Mac mini's single 256GB chip since it caused slower SSD speeds.

Two chips allows for parallel reading and writing so jobs can get done faster, but it's important to note that the difference isn't noticeable for most day-to-day tasks. The problem only applied to 256GB models and was primarily a pain point for enthusiasts -- but it's still nice to know that Apple is willing to listen to customers sometimes (not always, though).

Read more
Hurry! This Alienware laptop won’t be $600 off forever
The Alienware m16 R2 open on a table.

The Alienware m16 R2 is a stellar gaming laptop with an RTX 4060. Luke Larsen / Digital Trends

Gaming on a PC can be quite a bit different than playing on a PlayStation, Xbox, or handheld console. In many cases, gaming desktops and laptops can deliver faster response times and less input lag. Gaming PCs tend to provide better graphical performance, too, along with the fact that you’ve got an entire computer that can be used for everything from web browsing and watching movies to photo editing and video calls (as long as there’s a built-in webcam). 

Read more