Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments

Researchers at the University of Massachusetts Amherst have found a way to revive expired Visa contactless credit cards for in-store purchases. They can rewrite the expiration date that a point-of-sale terminal reads through near-field communication, without compromising the card's cryptography. This attack, called Zombie Card, requires physical access to the card. The researchers demonstrated that it is possible to make real purchases using an expired card that has been altered in this way. The Zombie Card attack manipulates the information read by the POS terminal, allowing the expired card to be used again.