Attackers target retailers’ gift card systems using cloud-only techniques

A newly uncovered attack campaign mounted by suspected Morocco-based attackers has been hitting global retailers and other businesses issuing gift cards. What makes this campaign stand out is how the threat actors avoid typical malware techniques and endpoint hacking and operate entirely in cloud environments. The attackers rely on phishing and smishing to harvest account credentials, then use trusted cloud services instead of deploying malware. “Once they gain access to an organization, they pursue the … More →

The post Attackers target retailers’ gift card systems using cloud-only techniques appeared first on Help Net Security.