And anyone thought about that before 🤣

You use the credit card on multiple websites, for each, you try the expiration date and the CVV.
Each advantage taken for it are explained in the article.
Only VISA is sensible to this attack as MasterCard detect the fraud after less than 10 attempts.

This is why we need 2FA to confirm a transaction at least.