Have Cybercriminals Hacked Visa/MC 3-D Secure?
From InfoSecurity Magazine:
You're probably familiar with the 3-D Secure system of card security for online transactions - aka Verified by Visa (for Visa) and SecureCode (for MasterCard) - but now a security researcher is reporting that cybercriminals may have found a way around the online transaction security. According to former Washington Post security researcher Brian Krebs, a dashboard panel in a cracking utility he accessed online has a tab labelled `Arcot.' "Arcot Systems is the company whose software powers the authentication system used by MasterCard’s SecureCode and Visa's Verified by Visa programs", he says in his latest security blog. "What's interesting is that the thieves could defeat these security systems by gathering personal data on victim card holders, which they appear to have done here", he adds. <>
Related: Verified by Visa: "Textbook Example of How NOT to Design an Authentication Protocol" -ePayments News Blog
