Momentarily unencrypted Payment cards
I read about the cyber-attacks related to the momentarily unencrypted payment processing data at the point of sales devices. Technically, how is it possible?
Is it when the cardholder enters an EMV (CHIP-and-PIN) payment card to make a payment, during the entry of PIN, the data remains unencrypted and it is skimmed? If not what else could happen in an ‘end to end encryption’ environment? Or this at all doesn’t occur to the EMV cards and applicable to the cards with magnetic strip only?
Either way I believe the usefulness of that data is limited for online transactions only, as for cash withdrawal or to use the cloned card the hacker would need PIN as well.