{"id":613,"date":"2016-12-07T13:07:00","date_gmt":"2016-12-07T14:07:00","guid":{"rendered":"https:\/\/mmscom.net\/?p=613"},"modified":"2025-06-03T14:37:26","modified_gmt":"2025-06-03T14:37:26","slug":"capture-and-clone-contactless-cards-easily-dodgy-as","status":"publish","type":"post","link":"https:\/\/mmscom.net\/index.php\/2016\/12\/07\/capture-and-clone-contactless-cards-easily-dodgy-as\/","title":{"rendered":"Capture and clone contactless cards easily. Dodgy as."},"content":{"rendered":"<p><a href=\"http:\/\/dash.coolsmartphone.com\/wp-content\/uploads\/2016\/12\/wp-1481119856312-1.png\" data-rel=\"gallery-gallery-0\" data-rl_title=\"\" data-rl_caption=\"\"><img decoding=\"async\" title=\"Capture and clone contactless cards easily. Dodgy as.\" class=\"aligncenter size-full lazyload\" alt=\"Capture and clone contactless cards easily. Dodgy as.\" src=\"data:image\/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==\" data-src=\"https:\/\/mmscom.net\/wp-content\/uploads\/2016\/12\/wp-1481119856312.png\"><\/a> <\/p>\n<p>I saw this particular item appear on a promoted tweet this morning and had to check I wasn\u2019t going mad. For just over \u00a3126, it\u2019ll capture your tap-to-pay card information and will then clone it. The result, after just a few minutes carrying the thing on the tube, a bus or train, is a huge stack of card details that you can then use and abuse.<\/p>\n<p>The description of <a href=\"https:\/\/store.ryscc.com\/products\/chameleonmini-revg\">the product<\/a> is frighteningly honest \u2026<\/p>\n<blockquote>\n<p>\nThe ChameleonMini firmware can be configured and uploaded via USB to emulate a passive NFC device (e.g. a contactless card), act as an active NFC device (e.g. an RFID reader), sniff the communication (i.e. monitor the bits on the RF interface), and log the communication (during emulation and sniffing).<\/p>\n<\/blockquote>\n<p>So, let\u2019s just go over that again. It can <em>pretend to be a reader<\/em>, so can grab your card details when you\u2019re close to it. It can then <em>emulate your card<\/em> so that the device can be held next to a payment machine to pay for items. Even if that\u2019s not possible, this machine should be able to read your card number and sort code, plus it can copy door entry cards too, potentially letting people get into your workplace.<\/p>\n<p><a href=\"http:\/\/dash.coolsmartphone.com\/wp-content\/uploads\/2016\/12\/wp-1481118344730-1.png\" data-rel=\"gallery-gallery-0\" data-rl_title=\"\" data-rl_caption=\"\"><img decoding=\"async\" title=\"Capture and clone contactless cards easily. Dodgy as.\" class=\"aligncenter size-full lazyload\" alt=\"Capture and clone contactless cards easily. Dodgy as.\" src=\"data:image\/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==\" data-src=\"https:\/\/mmscom.net\/wp-content\/uploads\/2016\/12\/wp-1481118344730.png\"><\/a><\/p>\n<p>Of course, the makers of this device, which is based on open source software, tell us that it\u2019s purely for \u201cpractical NFC and RFID security analysis, compliance and penetration tests, and various end-user applications\u201d but then they also say that..<\/p>\n<blockquote>\n<p>The freely programmable platform can create perfect clones of various existing commercial smartcards, including cryptographic functions and the Unique Identifier (UID).<\/p>\n<\/blockquote>\n<p>Scary times. What next? Wrap your card in foil?<\/p>\n<p><a href=\"http:\/\/dash.coolsmartphone.com\/wp-content\/uploads\/2016\/12\/wp-1481119448193-1.png\" data-rel=\"gallery-gallery-0\" data-rl_title=\"\" data-rl_caption=\"\"><img decoding=\"async\" title=\"Capture and clone contactless cards easily. Dodgy as.\" class=\"aligncenter size-full lazyload\" alt=\"Capture and clone contactless cards easily. Dodgy as.\" src=\"data:image\/gif;base64,R0lGODlhAQABAAAAACH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==\" data-src=\"https:\/\/mmscom.net\/wp-content\/uploads\/2016\/12\/wp-1481119448193.png\"><\/a><\/p>\n<p>The post <a href=\"https:\/\/www.coolsmartphone.com\/2016\/12\/07\/capture-and-clone-contactless-cards-easily-be-a-thief-easily\/\">Capture and clone contactless cards easily. Dodgy as.<\/a> is original content from <a href=\"https:\/\/www.coolsmartphone.com\">Coolsmartphone<\/a>. If you see it on another news website, please let us know.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I saw this particular item appear on a promoted tweet this morning and had to check I wasn\u2019t going mad. For just over \u00a3126, it\u2019ll capture your tap-to-pay card information and will then clone it. The result, after just a few minutes carrying the thing on the tube, a bus or train, is a huge [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":615,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17],"tags":[],"class_list":["post-613","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-apple-watch"],"_links":{"self":[{"href":"https:\/\/mmscom.net\/index.php\/wp-json\/wp\/v2\/posts\/613","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mmscom.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mmscom.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mmscom.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mmscom.net\/index.php\/wp-json\/wp\/v2\/comments?post=613"}],"version-history":[{"count":3,"href":"https:\/\/mmscom.net\/index.php\/wp-json\/wp\/v2\/posts\/613\/revisions"}],"predecessor-version":[{"id":619,"href":"https:\/\/mmscom.net\/index.php\/wp-json\/wp\/v2\/posts\/613\/revisions\/619"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mmscom.net\/index.php\/wp-json\/wp\/v2\/media\/615"}],"wp:attachment":[{"href":"https:\/\/mmscom.net\/index.php\/wp-json\/wp\/v2\/media?parent=613"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mmscom.net\/index.php\/wp-json\/wp\/v2\/categories?post=613"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mmscom.net\/index.php\/wp-json\/wp\/v2\/tags?post=613"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}