All my Deutschlandtickets gone: Fraud at an industrial scale
Q Misell, 551724 / maya boeckh
39th Chaos Communication Congress (39C3): Power Cycles · Day 1 · Saal One
This talk, "All my Deutschlandtickets gone: Fraud at an industrial scale," delivered by Q Misell and 551724 / maya boeckh at 39C3, meticulously uncovers two distinct yet interconnected large-scale fraud schemes targeting Germany's popular Deutschlandticket. The presentation details how vulnerabilities in payment processing, cryptographic key management, and inter-company communication within the German public transport sector led to hundreds of millions of euros in losses. The speakers, through their dedicated research, exposed significant systemic flaws that enabled both sophisticated and surprisingly amateur fraudsters to exploit the system.