‘Revolution’ Crimeware & EMV Replay Attacks
Summary: A fraudster in a cybercrime forum is selling a software-as-a-service package called "Revolution" that helps thieves push magnetic-stripe card data through Visa and MasterCard networks disguised as chip-enabled transactions, targeting U.S. banks that have not fully implemented EMV validation. The attacks follow reports that several U.S. institutions received tens of thousands of dollars in fraudulent transactions from Brazil on cards stolen in the October 2014 Home Depot breach, with MasterCard officials saying thieves controlling a payment terminal could manipulate transaction data fields.
Key Takeaway: The seller offers buyers a list of U.S. banks that have not properly implemented chip-card validation, and Gartner analyst Avivah Litan notes some banks have relaxed fraud controls on EMV transactions even though they are not yet using the chip's added protections. A bank that declines all transactions carrying a chip POS entry mode it does not issue would have stopped this fraud, according to one commenter on the piece.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026