|
Relay Attacks: Also known as ˇ°Mafia fraud,ˇ± this involves two colluding devices, one near the victim, one near the legitimate terminal to extend the communication range and impersonate the victim without physical theft of their device. Studies confirm successful proof-of-concept demonstrations on Android HCE and theoretical feasibility on SE-based systems.
Token Misuse and Lifting: Poorly implemented tokenization can result in static or long-lived tokens that attackers can extract from device memory or intercept during transmission, then reuse to authorise fraudulent transactions.
|