This Threat Actor is Putting Mobile Payment Systems at Risk

Banking malware is one of the most dangerous forms of malware out there because of the fact that this is the sort of thing that could potentially end up causing victims to suffer significant financial losses. A threat actor called InTheBox has been upping the ante on this front by using web injects that other malicious actors and hackers can buy in order to infect payment systems with various forms of malware.

With all of that having been said and now out of the way, it is important to note that these web injects can be purchased for as little as $30 by individuals. They can be used to glean extremely sensitive data that would give malicious actors access to financial accounts, not to mention intercepting payments which can be harmful to all parties involved.

Numerous regions all around the world have suffered at the hands of these injects. They range from Australia to much of Asia including the Southeast, South Asia, and the Middle East. The US has also become a prime target for these web injects with all things having been considered and taken into account.

What makes things worse is that InTheBox is a verified Android vendor, which makes their potential attacks all the more significant. The massive increase in their web inject stockpile that was noted by Cyble Research and Intelligence Labs is quite a significant red flag because of the fact that this is the sort of thing that could potentially end up leading to a huge uptick in such attacks down the line.

All in all, mobile payment systems are at serious risk. Not only are they at risk of losing consumer confidence, but their own systems can end up being compromised which can lead to financial loss on a truly global scale.

Malicious actors can buy individual web injects along with packages that can cost thousands of dollars. This is a streamlined store that offers a multitude of options, all of which can create an endless array of issues that can bring global commerce through mobile payments to a grinding halt.

Read next: Cybersecurity Jobs Are Still Rising Despite Widespread Tech Layoffs
by Zia Muhammad via Digital Information World