Cybercriminal enterprise is mass testing millions of usernames and passwords per day in a hunt for loyalty card data. Threat actors are compromising up to 100,000 inboxes daily in a campaign that targets gift card and customer-loyalty program data. The actors use automated systems to log in to each inbox and search for a variety of domains and other terms related to companies that maintain loyalty and points programs, issue gift cards and handle their fulfillment. The exploitation of rewards-points programs is a growing criminal enterprise, according to a Flashpoint 2018 analysis.”]
Source: https://threatpost.com/attacks-inboxes-gift-card/169187/