Have you ever considered how secure your office or hotel key
\ncards really are? <\/b><\/p>\n
<\/b>Recent research by French security firm Quarkslab has
\nuncovered a serious vulnerability that could impact millions of contactless
\ncards worldwide. These cards, produced by Shanghai Fudan Microelectronics
\nGroup, contain a backdoor that allows hackers to clone them in mere minutes. <\/p>\n
This backdoor, discovered by Quarkslab researcher Philippe
\nTeuwen, is found in RFID smart cards used in many places, from office buildings
\nto hotel rooms. The worrying part? Hackers only need a few minutes of physical
\naccess to one of these cards to clone it. And if they can infiltrate the supply
\nchain, they could clone cards on a massive scale almost instantly.<\/p>\n
Teuwen stumbled upon this issue while testing the security
\nof the MIFARE Classic card family, a type of card used widely in public
\ntransport and the hospitality industry. These cards have been around since 1994
\nand have seen numerous security upgrades over the years. However,
\nvulnerabilities that allow attacks without needing access to the card
\nreader\u2014just the card itself\u2014remain a significant concern.<\/p>\n
In 2020, a new variant of these cards, known as FM11RF08S,
\nwas released by Shanghai Fudan Microelectronics. This version was supposed to
\nbe more secure, featuring protections against known attacks. But Teuwen
\ndiscovered that this version still has weaknesses. Specifically, if certain
\nkeys are reused across different sectors or cards, they can be cracked in just
\na few minutes.<\/p>\n
Further investigation revealed a hardware backdoor that
\nallows anyone who knows about it to bypass the card’s security, even if it has
\nbeen customized with unique keys. Shockingly, the secret key that enables this
\nbackdoor is the same across all FM11RF08S cards. Teuwen also found a similar
\nbackdoor in the previous generation of these cards, and it turns out that other
\nmodels from the same vendor, as well as some older cards from NXP
\nSemiconductors and Infineon Technologies, share the same flaw.<\/p>\n
Quarkslab has issued a warning, urging businesses to check
\ntheir systems and assess the risks. Many organizations may not even realize
\nthat the MIFARE Classic cards they\u2019re using are actually the vulnerable Fudan
\nFM11RF08 or FM11RF08S models. These cards have been found in hotels across the
\nU.S., Europe, and India.<\/p>\n
This discovery highlights the importance of regularly
\nreviewing and updating your security systems. If you’re using contactless
\ncards, it might be time to take a closer look at whether they’re as secure as
\nyou think.<\/p>\n","protected":false},"excerpt":{"rendered":"
Have you ever considered how secure your office or hotel key cards really are? Recent research by French security firm Quarkslab has uncovered a serious vulnerability that could impact millions […]<\/p>\n","protected":false},"author":1,"featured_media":272,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[],"tags":[],"class_list":["post-273","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"_links":{"self":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/posts\/273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/comments?post=273"}],"version-history":[{"count":0,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/posts\/273\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/media\/272"}],"wp:attachment":[{"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/media?parent=273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/categories?post=273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qld.cybersafebusiness.au\/index.php\/wp-json\/wp\/v2\/tags?post=273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}