/
victim_sectors:e-commerce × victim_sectors:"financial services" × limpar

Resultados

2 casos · pág. 1/1

yokai.hakaisecurity.io · medium

Client-Side Path Traversal chains in bug bounty targets enable stored XSS, account takeover and account deletion

Researcher Pedro Cruz (gankd) documents two Client-Side Path Traversal (CSPT) chains found in production bug bounty programs. The first turns CSPT into Stored XSS and account takeover on a payments platform's Angular POS single-page application. The second, found with Felipe Torres, triggers unauthorized account deletion on one of the lar…

financial services e-commerce
research.checkpoint.com · · 2 fontes · 2 atualizações medium

Check Point: AI-integrated antidetect browsers (Kameleo, AdsPower, MultiLogin) fuel account takeover, fraud and influence operations

Check Point Research reports that commercial antidetect browsers Kameleo, AdsPower and MultiLogin are widely referenced on Russian-language underground forums and are used for account takeover, carding, fraudulent loan applications, ad-revenue fraud and coordinated inauthentic behavior (CIB). The tools spoof browser fingerprints, manage p…

social media e-commerce