Myce.com Latest Updates

Researchers recover credit card info from a factory reset Xbox 360

Posted at 30 March 2012 16:39 CEST by etdragon

Resetting your Xbox 360 to factory settings before selling it or trading it in may not be enough to prevent your personal information from falling into the wrong hands. Researchers have determined that credit card information can be recovered from used Xbox 360 consoles despite those consoles having been reset to factory settings.

Dr. Ashley Podhradsky, Dr. Rob D’Ovidio, and Cindy Casey all study digital forensics at Drexel. Casey went out and purchased a used Xbox 360 and was able to pull an alarming amount of information off the hard drive with very simple tools.

The used Xbox purchased by the researchers was bought directly from Microsoft and had been reset to factory default settings. A basic modding tool was used to gain access to files on the hard drive. With a little bit of additional work the full credit card information previously stored on the console could be extracted. In addition to the credit card number itself, user names, user profiles, and a city could also be extracted.

Dr. Ashley Podhradsky spoke with Kotaku about the process saying,

“Microsoft does a great job of protecting their proprietary information. But they don’t do a great job of protecting the user’s data.”

Podhradsky also commented that for seasoned hackers the information may be accessed even more quickly than it could be done by the group of researchers.

“A lot of them already know how to do all this,” she said. “Anyone can freely download a lot of this software, essentially pick up a discarded game console, and have someone’s identity.”

So how can you protect yourself if you want to trade in your Xbox? Podhradsky recommends removing the hard drive from the device, attaching it to a computer, and running a utility like Darik’s Boot & Nuke to completely wipe out all the data on the drive.

“I think Microsoft has a longstanding pattern of this,” Podhradsky said. “When you go and reformat your computer, like a Windows system, it tells you that all of your data will be erased. In actuality that’s not accurate—the data is still available… so when Microsoft tells you that you’re resetting something, it’s not accurate.”

Between this and the ridiculous Sony PlayStation Network hacks that happened last year I am hesitant to link a credit card to any of my game consoles. I would rather just go out and purchase prepaid points cards for everything. Have any of you traded in an Xbox 360? Are you concerned about your credit card information being pulled off the device?

Click for more news

game consolespiracy

Click to share

There are 0 comments

Post your comment

You need to register before you can comment

Like us

Most popular headlines

Kingston HyperX Fury 240GB SSD review

  • Sun 19 Oct 09:10 by Vroom

  Review: Kingston HyperX Fury Reviewe...

A look inside Google's secret and huge datacenters: cables and pipes

It's likely you haven't seen a datacenter from the inside before and certainly n...

Freedom hack allows Android in-app purchases without paying

An Android application called "Freedom" is spreading on the internet a...

Malwarebytes - Myce Exclusive Discount Promotion

At Myce we're always keen to bring the best discounts, promotions, and offers to...

Microsoft lowers minimal screen resolution in Windows 10 - runs well on low-end devices

Windows 10 will work on screens with a lower resolution than before. Microsoft h...

See all headlines
Follow Myce.com