Transaction Redirect
| ID: | TAC-20 |
| Phase: | Actions on the Objective |
The adversary will transfer money or Loyalty points from a user account on a web application to another account elsewhere (such as a bank account) to which the adversary(/ies) alone has access.