CERT-In says CRAFTY FALCON is hitting Indian fintech payment APIs
Remediated firms were attacked again on holidays, and CERT-In has not named the actor or victim count.
Stories per day · 30 days
3 RSS
Related3-d-secure1account-takeover1ai-agents1ai-assisted-attacks1approval-monitors1arcot1broadcom1cairn1cert-in1chatgpt1crafty-falcon1device-intelligence1e-commerce1fingerprint1fintech1fraud-detection1india1norforge1
16 stories, newest first · one card per story
Stories tagged #payment-fraud
Fingerprint launches Fraud Score trained on customer fraud outcomes
Separate models cover payment fraud, account takeover, fake accounts and promotion abuse, and retrain as customers add outcomes.
ChatGPT Phishing Kit Uses Rotating WordPress Websites to Steal Payment Details and OTPs
Fraudulent ChatGPT Plus billing emails direct victims to interactive phishing pages on nxcli.io that collect card details and allow operators to capture OTPs in real time.
Broadcom adds Arcot Scam Defense to 3-D Secure authentication
Broadcom says reviewing one issuer’s top 1% of successful challenges could have covered about $4 million in a month.
Correlated failures of AI approval monitors
Counting evidence sources blocked 0.9% of correct payments versus 7.4% for the best vote-counting rule, at equal safety.
Attackers use AI pen-test tool Cairn against e-commerce sites
NorForge says a Chinese-speaking operator ran over 1,100 projects across dashboards aimed at stealing payments.
1
Phishing emails are baiting your AI assistant
Phishing emails hide prompt injections that try to make AI inbox assistants endorse fraudulent payment changes.
6
Fake brand discounts on social media prey on shoppers’ fear of missing out
Group-IB details the Milk Dragon phishing kit using fake social-media discounts to steal payment cards and 3DS one-time passwords across 66 countries.
3
Milk Dragon AiTM Kit Uses Real-Time OTP Relay and WebSocket Keylogging to Bypass MFA
Group-IB says the Milk Dragon kit relays OTPs live to steal shoppers' card payments across 66 countries.
Milk Dragon Phishing Kit Uses Facebook and TikTok Discounts to Steal Cards and Bypass MFA
Milk Dragon uses fake social-media discounts to steal cards and intercept 3-D Secure codes.
5
Major Cyber Attacks in September 2026: US Organizations Face Session Theft, Remote Access, and Payment Fraud
September campaigns CSuite, N0va, and IronToll phished US organizations for Microsoft 365 sessions, tokens, and payment data.
6
SR-Fraud: An Outcome-Supervised Reflective LLM Agent Framework for Non-Stationary Payment Fraud Detection
SR-Fraud uses a reflective LLM agent to detect emerging payment-fraud bursts before labels mature.
Financially Motivated Threat Actor BREEZE COMET Targets Brazil
Google Threat Intelligence details BREEZE COMET, a financially motivated group manipulating Brazilian payment systems and banking software to conduct fraudulent transfers since 2024.
1
Risky Bulletin: Expired cards can be used for new transactions
Researchers show expired Visa contactless cards can be revived via NFC man-in-the-middle relay to run fraudulent transactions; roundup also covers major breaches.
2
WindRelay Android Malware Turns Victims' Phones Into NFC Relays for Payment Fraud
Group-IB details WindRelay, a new Android NFC relay malware paired with SpyNote RAT to relay card data live for contactless payment fraud and loans.
WindRelay Malware Pairs With SpyNote RAT in Live-Call Scam
New WindRelay Android NFC-relay malware paired with SpyNote RAT enables real-time card cloning during live scam calls.