Classiscam-style scammers abuse a fintech spend-management platform to send phishing and validate stolen bank credentials
Scammers abused a legitimate spend-management platform as part of a fraud operation. They used its notification system to send phishing messages and its open-banking account linking to validate stolen banking credentials. Group-IB documented the activity in a client environment after the platform reported suspicious payment notifications …