It can also mimic a Text Captchas to require the victim to input the chosen numbers," the researchers said. For example, it can simply offer the user free WiFi access and, as the return, the victim should finish the online training by clicking the designated numbers.
The researchers said, "the evaluation results show that the attacker can recover the key with a high successful rate." "In practice, the attackers have more choices to achieve the user specific training. The researchers tested the WindTalker attack in a real-world scenario against several mobile phones and were able to recover the 6-digit transaction PIN required to complete a mobile payment transaction via Chinese Payment Service Alipay.
0 kommentar(er)
