"Pass-the-ticket" attack