MagSpoof Digitally Clones the Magnetic Stripe of Any Credit Card « Null Byte :: WonderHowTo

Samy Kamkar, the security researcher known for theMySpace Wormand hiscombination lock crackingskills (usingan online calculator), is back—and this time, he's after your credit cards!Well, not really, but his latest project, dubbedMagSpoof, can spoof any magnetic stripe or credit card, enabling a device to wirelessly send a signal to traditional credit card readers without needing NFC or RFID, à laSamsung Pay. Furthermore, the project is easy to build using basic electronics andhis custom code.Once built, MagSpoof can function as a traditional credit card (or hotel room key, driver's license, MTA card, etc.), can switch between cards, and has the potential to disable new chip-and-PIN (EMV) cards and predict American Express card numbers, although the code for the latter two isnotincluded in the project.Don't Miss:Samy's MagSpoof Hacking Device Featured on Mr. RobotUnderstanding Magnetic StripesTo understand how MagSpoof works, you'll first need to know how magnetic stripes work. While the level of magnetism in these stripes is quite low, it is enough to attract iron oxide particles, which in turn reveal each bit in the tracks (credit cards have two tracks).Once the iron oxide has adhered to the strip, you can actually use the bits to pull the credit card number.Two solid stripes is a 1, while a stripe followed by a space is a 0. This data can be used to gather the credit card number, and other data, such as expiration date, CVV code, and more. Just take each 5 bits and only read the first 4.Using MagSpoofMagSpoof produces a magnetic field that emulates a stripe swipe by quickly changing the polarization of an electromagnet. And, as stated by Samy, "the stronger the electromagnet, the further away you can use it."Building the HardwareHeadover to Samy's blogfor a full list of all the required parts, details about them, and where you can get them from.SchematicsThe schematics should be fairly easy to follow if you've ever done anything like this before. If not, you probably shouldn't be messing around with it.FirmwareYou can download the code and full schematic fromSamy's GitHub page.RestrictionsFor security purposes, MagSpoof does not have a publicly accessible code for bypassing chip-and-PIN protection and American Express card number protection.Chip-and-PINNew to the U.S. (but widely used in Europe for some time), this card protection mechanism requires a card to be "dipped" in a card reader at the point-of-sale.This protectioncanbe deactivated from the bits obtained in the magstripe, completely bypassing this enhanced security measure. Samy has offered this information to credit card issuers, and is therefore not opening it up to the public.American Express Card ProtectionAfter Samy lost his AMEX card, he noticed that the replacement card had very similar digits to the one he lost. This led to him discovering that a global pattern could be used to accurately predict card numbers using the number of a stolen card."This means if I were to obtain your Amex card and you called it in as lost or stolen, the moment you get a new card, I know your new credit card number."Again, he has notified American Express, and therefore will not release the code pertaining to AMEX cards to the public.For more information on this project,check out Samy's blog. And be sure to subscribe toApplied Hacking, along with hisYouTube channel, to stay up to date on his latest research and projects.Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseCover image viaShutterstockRelatedNews:Samy's MagSpoof Hacking Device Was Just Featured on Mr. RobotNews:Curve's Newest Feature Lets You Go Back in TimeHow To:No Knife? Use Your Credit Card to Cut Food InsteadCES 2015:Wocket Digitizes All the Cards in Your Wallet into One Single, Secure CardHow To:Use magnetic card readers and writers with your PCHow To:Make a magical toilet rollHow To:Make a candy cane striped Christmas card boxHow To:Do Rainbow Striped NailsHow To:How Hackers Stole Your Credit Card Data in the Cyber Attack on Target StoresNews:Here's Everything You Should Know About Samsung PayHow To:Do the elevation card trickHow To:Hack Your Mini-Fridge into a Vending Machine to Take Care of Freeloading Friends at Your Next PartyHow To:Get Unlimited Free Trials Using a "Real" Fake Credit Card NumberHow To:Do Striping Tape NailsHow To:Craft a giraffe embellished "Congrats" baby arrival cardHow To:Lock and Unlock a SafeHow To:Digitally ink and painting for 2D animationNews:The Best Black Friday Deals on Android Phones from Best Buy, Walmart & MoreHow To:Auto-Fill Credit Card Forms Using Your iPhone's Camera in iOS 8How To:Use a map and compass tutorialHow To:Do Magnetic Polish Nail Designs ?!How To:Manage Your Business's Finances Like a Pro with This Easy-to-Use SoftwareHow To:Take into account magnetic declination when using a compass to navigateSUBMIT:Clever Idea for Magical Magnetic Fluid by August 1st. WIN: Your Very Own Bottle [Closed/Winner Announced]News:Giants Inspired NailsMaking Electromagnetic Weapons:The Theory Behind EMP GeneratorsHow To:How Credit Card Algorithms Work: The Anatomy of Credit Card NumbersNews:1.5 Million Credit Cards Hacked in the Global Payments Breach: Was Yours One of Them?SUBMIT:Ingenious Application for LED Graffiti by June 20th. WIN: Tagging Kit of the Future [Closed/Winner Announced]News:Rick's Pipe Dream - Magnetic Motor/GeneratorMovie Quiz:ET The Extra Terrestrial - ShoesNews:Medieval Frog Hop OffHow To:15 Clever Uses for Expired Debit, Credit, Gift, and Membership CardsHowTo:Use Science to Decode a Credit Card's Secret DataHow To:Measure Geomagnetic Storms with a DIY MagnetometerHow To Make A Coil Gun:Turning Electricity Into VelocityNews:Vintage Nail ArtNews:Math Craft Inspiration of the Week: The Intricate Sonobe Art of Meenakshi MukerjiHow To:Skip the Pre-Menu Credits in Deus Ex: Human RevolutionHow To:Display Photos in Your Home Without Any Frames