Please send posts to telecom-digest.org, with userid set to telecomdigestsubmissions, or via Usenet to comp.dcom.telecom
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Hackers exploit 7-Eleven's poorly designed password reset function to make unwanted charges on 900 customers' accounts.
By Catalin Cimpanu
Approximately 900 customers of 7-Eleven Japan have lost a collective of ¥55 million ($510,000) after hackers hijacked their 7pay app accounts and made illegal charges in their names.
The 7pay mobile app was designed to show a barcode on the phone's screen when customers reach the 7-Eleven cashier counters. The cashier scans the barcode, and the bought goods are charged to the user's 7pay app and the customer's credit or debit cards that have been saved in the account.