Hackers target unsecured Amex and SnapChat sites to steal user data
Maryland-based security firm INKY Security tracked attack activity related to the vulnerability from mid-May through mid-July. The phishing attack relies on a known open redirect vulnerability (CWE-601)...
Source: techspot.com