DEF CON 33 - Carding is Dead, Long Live Carding - Federico Valentini, Allesandro Strino

DEF CON 33 - Carding is Dead, Long Live Carding - Federico Valentini, Allesandro Strino

Source: YouTube · DEFCONConference · published Oct 10, 2025 · 37:34

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

Carding is evolving into NFC relay attacks powered by malware-as-a-service platforms, creating a new era of financial fraud [0:55].

Key Takeaways:
• NFC relay attacks surged over 35-fold comparing H2 2024 to H1 2025 [4:16]
• Supercardics is the first commercialized MaaS platform for NFC relay attacks with subscription tiers and support [7:19]
• Attacks combine social engineering (malicious app installation, PIN sharing) with NFC to relay card data in real-time [9:25]
• Traditional malware developers struggle to integrate NFC capabilities due to different attack methodologies [27:10]

Financial fraud will likely split between traditional malware and specialized NFC relay tools, requiring new defense approaches [31:15].

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

So thank you everybody for joining our session this morning. So since there are some as you can see from the screen some technical difficulties we cannot share uh slide right now for the audience which is kind of sucks but um for the you know uh live streaming and all the content that are recorded uh the video will also have the slides. So right now I've got my colleague here with the slides in front of you. I don't know it's nothing nothing compared to the you know the big screen but if you want to you know just have a little bit of content of what we are trying to talk with you today so please you know go to the very first or second uh lines for the for for just you know starting seeing from the content. So thank you very much. It's a honor here to be here today uh in defcon and thanks t…