“Once card details were collected, they were exfiltrated to [attack servers controlled by cybercriminals].”
In an email exchange with Lifewire, Schloss said the attack appears to exploit a long-standing issue in Chrome.
“Most people have become good at identifying emails that don’t quite seem right,” argued Hay.
John Lund / Getty Images
Just_Super / Getty Images