Softpedia – by Catalin Cimpanu
A criminal group going under the name of The CC Buddies is selling a hi-tech device on the Dark Web that’s capable of copying details from contactless debit cards if held as close as eight centimeters away from a victim’s card.
CC Buddies claim that their device, named Contactless Infusion X5, can copy up to 15 bank cards per second, something that may come in hand if a crook is going through a crowd at a concert or through a crowded subway cart.
X5 targets RFID-enabled contactless debit cards
X5 is designed to copy data from the radio chip embedded in modern RFID contactless bank cards. This data is stored on X5’s internal storage system, and thieves can connect the device to their PC using USB cables and transfer it using special software, also supplied by CC Buddies.
The device can collect data such as the card’s number and expiration date. If the debit card’s RFID chip stores information such as the card holder’s name, home address, and a mini statement, X5 can steal that data as well.
When it copies credit card numbers, X5 encrypts the data. The software provided by CC Buddies will allow the crooks to decrypt and download the stolen information from their X5 device to a Windows (XP or higher) PC, and start creating fake debit cards using blank plastic cards.
X5 costs around $800 and comes with blank plastic cards
Crooks can get their hands on an X5 device for only 1.2 Bitcoin (~$825). CC Buddies says they ship devices via mail, and each buyer will receive the X5 device, a USB cable for charging and data transfers, and 20 blank cards.
Below are X5’s technical specs, as provided by CC Buddies in their Dark Web ad, at the time of writing.
“ The Contactless Infusion X5 is the first contactless bank card hacker sold in the black market. This product was been designed and developed by The CC Buddies. The Contactless Infusion X5 is capable to detect and read ANY bank card from just 8 centimetres away! And reading at an amazing 1024kbps this powerful contactless reader will read and save at approximately 15 bank cards per second! ”
“ The Contactless Infusion X5 has a built-in 5V battery charged via a USB 3.0 cable (provided). Takes approx 3 hours to fully charge and it will last up to 10 hours in constant use. It’s also capable to read many other cards! Any card that is running on a 13.56mhz frequency, the Contactless Infusion X5 is able to read, and capture the data! But because the software we provide has been developed specifically to decrypt bank cards it won’t be able to decrypt any other cards, but we’re working on it and soon it will!! ”
Full Technical Specs:
Main specifications:
-Power Source: USB 3.0
-Speed: 480 Mbps (Full Speed)
-Supply Voltage: 5V DC
-Supply Current: 200 mA (maximum); 50 mA (standby); 100 mA (normal)
Contactless Smart Card Interface:
-Cards compatibility: ISO 14443 Part 4 Type A and B cards, FeliCa, and all four types of contactless (ISO/IEC 18092 tags)
-Protocol: FeliCa protocol, T=CL protocol
-Operating Frequency: 13.56 MHz
-Operating Distance: Up to 80 mm
-Memory: 8GB
-Smart Card Read/Write Speed: 1024kbps
Physical Specifications:
-Dimensions: 98.0 mm (L) x 65.0 mm (W) x 12.8 mm (H)
-Weight: 70 g
-Material: Polycarbonate
-Color: Black (with The CC Buddies brand)
-Antenna Size: 60 mm x 50 mm
-Cable Length: 50 cm (USB 3.0)
Built-In Peripherals:
-Bi-Color LED: Red and Green
-Buzzer: Monotone
Operating Conditions:
-Temperature: 0 – 50 °C
-Humidity: 10% - 90%
Operating System compatibility:
-Microsoft® WHQL 2000, XP, Vista, 7, 8, 10, Server 2003, Server 2008, Server 2008 R2, Server 2012
Package contains:
1 x Contactless Infusion X5
20 x Blank contactless cards (with chip)
1 x USB 3.0
1 x The CC Buddies software
1 x Retail package
“X5 is designed to copy data from the radio chip embedded in modern RFID contactless bank cards.”
Uh-oh! There goes the banks RFID chip campaign to force everyone to have an RFID chip if they want a debit card. So much for that idea!
Now can I have a debit card without an RFID chip in it since this shows that it is worse than before and will most certainly NOT keep my information any more safe than it did before?
****Crickets chirping********
Yea, didn’t think so.