Home
News
You are here

Google Wallet vulnerable to attacks aimed to retrieve your PIN number

By Daniel Petrov

Published: Feb 09, 2012, 5:33 AM

Add us as a preferred source on Google Search

Google Wallet vulnerable to attacks aimed to retrieve your PIN number

A simple "brute force" attack of Google Wallet's SHA256 hex-encoded string that contains your PIN number, can reveal it to hackers in just ten thousand combinations.

The security researchers that discovered the vulnerability proved how easy it is by writing the app Wallet Cracker, which extracted the PIN in no time. While digging through the open source code, they also found unique user IDs and the Google account information, rounding up the tools one would need to easily poach your associated card account.

Google has been made aware of the issue, and is working with the banks and security software providers involved to remedy this. In the meantime, the researchers suggest you abstain from rooting your handset, update your software regularly, enable the lock screen, and uncheck the "USB Debugging".

source: zvelo via Engadget

$90

$210

$120 off (57%)

Mint Mobile is now allowing you to get whichever plan you like for either three, six, or 12 months for just $15/mo. If you go for the six-month unlimited service, for instance, you'll now have to pay just $90 upfront instead of $210.

Buy at Mint Mobile

View Full Bio

Daniel, a devoted tech writer at PhoneArena from 2010 to 2025, has been engrossed in mobile technology since the Windows Mobile era. His expertise spans mobile hardware, software, and carrier networks, and he's keenly interested in the future of digital health, car connectivity, and 5G. Beyond his professional pursuits, Daniel finds balance in travel, reading, and exploring new tech innovations, while contemplating the ethical and privacy implications of our digital future.