Chip cards have not being cloned, but fraud involving cards and terminals gain media attention in Brazil (16.nov.2014)
The news story “Gang uses bluetooth to clone the chip cards and moves millions”, aired last Sunday (11/16/2014) in Brazilian television show “Fantástico”, made strong statements about the security of electronic payment systems in Brazil and left many people worried.
Images of skimming devices installed by the gang in payment terminals, blank chip cards and statements like “there is strong evidence that carders achieved the cloning of chip chards” gained great media attention (20.6 rating points in the “Fantástico” show, almost the same as in the elections, when the program reached 24 points, according to OTVFoco.com.br).
Some facts, however, need to be clarified and contextualized.
First, it is important to clarify the difference between cloning — which by definition would be a perfect, indistinguishable, copy of the original card — and a rough copy of some public data, which is what has apparently happened.
We have evidence the attacks reported on the show are based on two well-known techniques:
The news story also highlights the supposed uniqueness of the attacks (“the first time in the world where this sophisticated technology has been violated!”), whereas similar attacks have been recorded (and prevented) in the past.
The show used analogies to try to explain the fact that the attack takes advantage of flaws in the implementation of authorization systems:
“The chip is like a house that needs some security in order not to be hijacked by thieves. The house is safe, you cannot enter in normal conditions. Normally, that street would have police control. (…) What happened is that some institutions have implemented streets with no guards or with very few guards.”
The analogy is valid — some institutions were not implementing all necessary authentication mechanisms. However, the show fails to clarify that this is basically a problem of terminals and authorization systems and not “chip card cloning”.
We have been contacted by dozens of people worried by the news and would like to reiterate here what we have already explained to each of them:
Matriz – Porto Alegre
Rua Manoelito de Ornellas, 55,
Sala 1303, Torre A
Porto Alegre RS
Av.Angélica, 2491 – 11º andar
Consolação. São Paulo – SP
© 2018 Aceká Marketing Digital