Tag: gift card fraud

Moroccan Cybercrime Group Steals Up to $100K Daily Through Gift Card Fraud
News

Moroccan Cybercrime Group Steals Up to $100K Daily Through Gift Card Fraud

Microsoft is alerting people to Storm-0539, a cybercrime group based in Morocco that uses extremely sophisticated email and SMS phishing assaults to steal and fraudulently obtain gift cards. According to the company's most recent Cyber Signals report, "their primary motivation is to steal gift cards and profit by selling them online at a discounted rate." "We've seen some examples where the threat actor has stolen up to $100,000 a day at certain companies." Microsoft initially made public Storm-0539 in mid-December 2023, connecting it to social engineering efforts aimed at stealing users' passwords and session tokens using adversary-in-the-middle (AitM) phishing pages. The group, also known as Atlas Lion, has been active since at least late 2021. They are known to take advantage ...
FBI warns of gift card fraud ring targeting retail companies
News

FBI warns of gift card fraud ring targeting retail companies

The FBI alerted American retail organizations to the fact that, since at least January 2024, a financially motivated hacking group has been using phishing attempts to target personnel in their gift card departments. Tracked as Storm-0539, this hacker organization uses a sophisticated phishing kit to get around multi-factor authentication on the personal and work mobile devices of retail department staff. Once an employee's account has been accessed, the attackers pivot towards compromised accounts associated with this particular portfolio and travel laterally through the network, attempting to locate the gift card business process. Apart from purloining the login credentials of employees in the gift card department, their activities also involve obtaining secure shell (SSH) passw...