Impact of threats for misappropriated cards 4
D3. (S3/S4) replace fingerprint features – realisable if:
D2 (interception of fingerprint features) realisable before misappropriation of card.
Attacker knows feature extraction method and can obtain fingerprint of cardholder.
High risk if both D3 & D2 realisable.
Medium risk if only D3 realisable.