security1 publisher
Revolut handed over passports to a rogue account inside a real government domain
The fraudulent request passed domain authentication because it genuinely came from the agency's mail domain, sent by an account the agency had not authorised. Revolut found out only when it called the agency to check.
Publishers:securityaffairs.com
Reality
- Evidence58
- Adoption25
- Hype gap+12
- Incentives68
- Confidence52