2 ms·
Since most card transactions these days require strong authentication and this is done in Denmark via NemId, which requires second factor (either an app or a ke
by egman_ekki 5y ago
Since most card transactions these days require strong authentication and this is done in Denmark via NemId, which requires second factor (either an app or a key card sent to individual's officially registered address), I wonder what their game plan is. They could use up all your codes and steal the key card from your mailbox, but otherwise I'm not sure... Maybe they wanted victims to pay for 'shipping' the item, but AFAIK NemId asks you to confirm a specific payment amount, so seems it would be quite small amount of money.
That being said, I fell for another shipping scam in DK, seems it's quite common these days. Bank cancelled the card and transactions easily, though.
- pineapple128 5y agoThe phishing scenario in the article allows the malicious actor to impersonate the victim simultaneously, while asking the victim for any 2FA codes. The attacker can be a man-in-the-middle and make the victim authorize a costly transaction (say $100), with the victim seeing a cost of $1. These is an example video here: https://blog.cmpxchg8b.com/2020/07/you-dont-need-sms-2fa.html https://blog.cmpxchg8b.com/2020/07/you-dont-need-sms-2fa.htm... Of course, the real transaction can be seen from the bank.
- flutas 5y agoI'm US based, so not sure on the exact details of the payment system. But since the article mentions confirming the bank balance, couldn't that be basically sending a pay request for the entire bank account balance?