Gift Card Gang Extracts Cash From 100k Inboxes Daily
Summary: A cybercrime group makes five to ten million email authentication attempts daily and obtains 50,000 to 100,000 working inbox credentials, according to a security industry source with visibility into the proxy network the fraudsters use. The group uses automated scripts to log into compromised inboxes and search for gift card and loyalty program data, which can be resold online for about 80 percent of its value.
Bottom line: The source identified 15,000 compromised Office365 accounts across 6,500 organizations in one week of April 2021 while seeing only about 25 percent of Microsoft's infrastructure, and Microsoft itself has said roughly one in 250 corporate accounts is compromised each month.
Read the original at Krebs on Security ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026