Hackers can pilfer credit card data from second-hand Xbox 360s: researchers warn
Researchers have warned that hackers can pilfer credit card information from second-hand Xbox 360 games consoles, even if the original owner restores the console back to factory settings and wipes out its hard drive.
A team of researchers led by Ashley Podhradsky of Drexel University revealed that they purchased a refurbished Xbox 360 console from one of Microsoft's authorized retailers, and downloaded a basic modding tool that allowed them to gain access to files and folders in the console, and eventually to dig out credit card information related to the original owner.
In an interview with gaming blog Kotaku, Podhradsky warned that extracting credit card information from used consoles might be an easier process for hackers.
She held software giant Microsoft responsible for the weakness, saying the company didn't do a great job to protect users' data.
Speaking on the topic she said, "Microsoft does a great job of protecting their proprietary information. But they don't do a great job of protecting the user's data."
The Redmond-based software firm will now have to verify why the factory reset option is not removing users' data.
