Categories: Mobile

Mobile payment system Square can be hacked, claims researchers

Square enables smartphone users to process credit card transactions remotely

Two researchers attending the Black Hat security conference yesterday in Las Vegas have demonstrated simple hacking technique that could allow unscrupulous individuals to purchase items using the mobile payment system Square and stolen credit card data. With this technique, would-be hackers could use stolen credit card data to withdraw funds without the need to be in possession of the physical credit card.

This hacking technique is made possible by the way in which Square works. Square is a mobile payment system that exists as a physical smartphone attachment or dongle and an Android or iOS mobile app. Users pay for goods by swiping their credit card through the Square dongle. The dongle creates a simple audio file containing the user’s credit card data that is then sent to the Square mobile app, processed and authorised by the appropriate credit card issuer. As it stands however, the audio files’ origins are not verified by the app so don’t necessarily have to be generated by the official dongle.

The two researchers, Adam Laurie and Zac Franken, created a simple program themselves that reads magnetic strip data from credit cards which is then converted to an audio file. This audio file can then be played into the Square dongle and the data is sent directly to the Square app for processing. The app does not distinguish between a proper credit card swipe and an audio file played into the device.

In this regard, stolen credit cards data could be stored efficiently in audio files and sold to dubious buyers. The Square app is due to be updated in the near future and will likely patch this vulnerability. Or instead, Square may issue new dongles that encrypt audio file data.

Albizu Garcia

Albizu Garcia is the Co-Founder and CEO of Gain -- a marketing technology company that automates the social media and content publishing workflow for agencies and social media managers, their clients and anyone working in teams.

Recent Posts

Bridging Traditional Venture Capital and the Masses: Democratizing Startup and Private Market Investments

Article by Luis X Barrios, CEO of Arkangeles For far too long, venture capital has…

10 hours ago

WEF scrubs ‘Valuing Nature’s Assets’ session from Sustainable Development Impact Meetings

The World Economic Forum (WEF) deletes a session entitled, "Valuing Nature's Assets," from its Sustainable…

2 days ago

Horasis India Meeting 2024: Here’s look at 10 key speakers this week in Athens

The theme of the 2024 Horasis India Meeting is cooperation, impact investing, and sustainable growth…

4 days ago

UN Summit of the Future Global Call: World leaders advocate Agenda 2030, UN reform

World leaders gather on the UN Summit of the Future Global Call to advocate for…

1 week ago

A Look Into AI and the Risks to Elections

Image via: Freepik When an entire nation devotes its attention to Vice President Kamala Harris…

1 week ago

5 ‘interconnected shifts’ are driving ‘profound systemic transformation’: Klaus Schwab, WEF report

World Economic Forum (WEF) founder Klaus Schwab says that the world is undergoing profound systemic…

1 week ago