FIRST CONTACT: New vulnerabilities in contactless payments