By obtaining a list of PANs, and deploying a bot that can contact multiple websites and try different combinations of the other parameters – CVV, expiration date and ZIP – attackers can quickly “crack” a credit card and use it to steal funds from its owner.