Transaction Redirect
ID: | TAC-20 |
Phase: | Actions on the Objective |
The adversary will transfer money or Loyalty points from a user account on a web application to another account elsewhere (such as a bank account) to which the adversary(/ies) alone has access.