Applying recent secure element relay attack scenarios to the real world: Google Wallet Relay Attack

TL;DR

This paper demonstrates how recent relay attack techniques on contactless smartcards can be practically applied to Google Wallet, showing a successful relay of EMV transactions over a wireless network.

Contribution

It provides a real-world application of relay attack scenarios to Google Wallet, including a detailed case study of a successful relay attack implementation.

Findings

Relay attacks can be effectively applied to Google Wallet.

Successful relay of EMV Mag-Stripe transactions over wireless networks.

Highlights vulnerabilities in contactless payment systems.

Abstract

This report explains recent developments in relay attacks on contactless smartcards and secure elements. It further reveals how these relay attacks can be applied to the Google Wallet. Finally, it gives an overview of the components and results of a successful attempt to relay an EMV Mag-Stripe transaction between a Google Wallet device and an external card emulator over a wireless network.