Transaction Redirect

parent /tactics/06-post-attack

The adversary will transfer money or Loyalty points from a user account on a web application to another account elsewhere (such as a bank account) to which the adversary(/ies) alone has access.