Wednesday, May 7, 2025
HomeComputer SecurityDigital Wallets Bypassed To Allow Purchase With Stolen Cards

Digital Wallets Bypassed To Allow Purchase With Stolen Cards

Published on

SIEM as a Service

Follow Us on Google News

Digital wallets enable users to securely store their financial information on smart devices and perform financial transactions without any hassle.

These wallets offer enhanced security compared to traditional payment methods, as these wallets encrypt payment data.

Since smartphone adoption has grown significantly, digital wallets are becoming increasingly popular for their convenience.

- Advertisement - Google News

Cybersecurity analysts at Usenix recently discovered that digital wallets were bypassed to allow purchases with stolen cards.

Free Webinar on Detecting & Blocking Supply Chain Attack -> Book your Spot

Digital Wallets Bypassed

Vulnerabilities are introduced by decentralized authority delegation in the digital payment ecosystem.

Adding victims’ wallet bank cards to their own wallets, bypassing payment authorization with implicit trust between wallets and banks, and using different payment types to get round access controls.

Such security flaws in system design and trust relationships open up several possibilities for fraud and unauthorized acts.

Threat actors exploit vulnerabilities in payment systems by creating backdoors across various transaction types, circumventing established access control policies. 

This sophisticated attack enables unauthorized users to make purchases of any amount using victims’ bank cards, even when those cards have been reported stolen and locked by their owners. 

The severity of this exploit lies in its ability to override standard security protocols, potentially leading to significant financial losses for victims and undermining trust in banking systems.

Researchers have conducted a thorough study that confirms serious security lapses in major US financial institutions and digital payment platforms.

Researchers focused on discovering and testing vulnerabilities in big banks such as Chase, American Express, and Bank of America, as well as widely used e-wallet applications such as Apple Pay, Google Pay, and PayPal.

These discoveries show how risky the current fintech systems may be. Due to this, they have shared their findings with all affected persons following responsible disclosure practices.

Additionally, security analysts have designed and advocated for a number of specific mitigation plans aimed at addressing these security flaws.

While as a recommendation they urged users to not only seek to fix security flaws identified but also to strengthen the system from such potential attacks in the future which will result in increased financial safety for millions of users.

Are you from SOC and DFIR Teams? Analyse Malware Incidents & get live Access with ANY.RUN -> Get 14 Days Free Acces

Tushar Subhra
Tushar Subhra
Tushar is a Cyber security content editor with a passion for creating captivating and informative content. With years of experience under his belt in Cyber Security, he is covering Cyber Security News, technology and other news.

Latest articles

IT Worker from Computacenter Let Girlfriend Into Deutsche Bank’s Restricted Areas

A former information technology manager has filed a whistleblower lawsuit alleging a major security...

NSO Group Ordered to Pay $168 Million to WhatsApp in US Spyware Verdict

A federal jury in California has ordered Israeli spyware maker NSO Group to pay...

BFDOOR Malware Targets Organizations to Establish Long-Term Persistence

The BPFDoor malware has emerged as a significant threat targeting domestic and international organizations,...

Uncovering the Security Risks of Data Exposure in AI-Powered Tools like Snowflake’s CORTEX

As artificial intelligence continues to reshape the technological landscape, tools like Snowflake’s CORTEX Search...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

IT Worker from Computacenter Let Girlfriend Into Deutsche Bank’s Restricted Areas

A former information technology manager has filed a whistleblower lawsuit alleging a major security...

NSO Group Ordered to Pay $168 Million to WhatsApp in US Spyware Verdict

A federal jury in California has ordered Israeli spyware maker NSO Group to pay...

BFDOOR Malware Targets Organizations to Establish Long-Term Persistence

The BPFDoor malware has emerged as a significant threat targeting domestic and international organizations,...