New Phishing Campaign Targets Stripe Users To Obtain Banking Data

By   ISBuzz Team
Writer , Information Security Buzz | Oct 21, 2019 06:00 am PST

A phishing campaign using fake invalid account Stripe support alerts as lures has been spotted while attempting to harvest customers’ bank account info and user credentials using booby-trapped Stripe customer login pages. Stripe is one of the top online payment processors, a company that provides the payment logistics internet businesses need to accept payments over the Internet from their e-commerce customers. This makes Stripe users the perfect target for threat actors looking to get their hands on their banking info, seeing that the company handles billions of dollars in payment every year.

Full story here:

Notify of
1 Expert Comment
Oldest Most Voted
Inline Feedbacks
View all comments
Jonathan Deveaux
Jonathan Deveaux , Head of Enterprise Data Protection
October 21, 2019 1:59 pm

Companies that are profitable, disruptors, or trendy may be HIGHER profile targets than other organizations. Threat-actors realize that emerging companies may have data security gaps due to their success and rapid growth. As customer popularity grows for a company, so do cyber-threats against it.

In this case, the cyber-threat is targeting its customer base under false pretences of the Stripe name. Stripe seems to have done a good job of providing information on its website with tips that should help users avoid getting phished.

Companies who want to secure their growth and protect the data privacy of their customers should do two things: 1) Keep their customers well informed about steps to avoid phishing attempts, and 2) Look at data-centric security to minimize risks from data breaches or data incidents.

Last edited 4 years ago by Jonathan Deveaux

Recent Posts

Would love your thoughts, please comment.x