Cybernews researchers discovered an exposed server linked to a documented large-scale fraud operation centered on online gift card trading platforms. The attacker appears to have focused on intercepting gift cards uploaded to peer-to-peer (P2P) trading platforms, allowing them to capture valuable card data before the normal transaction process was completed.
What did Cybernews researchers find:
- The server’s data indicated that the attacker chose from 58 gift card trading platforms and 3 peer-to-peer crypto exchange platforms that accepted gift cards.
- Exposure of data suggests that some platforms were not vulnerable to abuse, while others exposed internal data, gift card references, or infrastructure details.
- Exposed platforms included Cardlumi, Cardtonic, Trustonic, and Octoplus Box.
- According to the researchers, Anthropic’s Claude was used as the primary AI agent in the attack workflow.
According to Aras Nazarovas, Senior Information Security Researcher at Cybernews, platforms and their customers and sellers are potentially at risk, as customers would purchase redeemed gift cards, and it depends on how well the platform’s customer support handles these disputes.
For more information, read the article here:
https://cybernews.com/security/exposed-server-gift-card-fraud-operation-analysis
Related
This entry was posted on October 14, 2026 at 8:24 am and is filed under Commentary with tags Cybernews. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Gift card fraud operation uncovered: internal data, references, and infrastructure exposed
Cybernews researchers discovered an exposed server linked to a documented large-scale fraud operation centered on online gift card trading platforms. The attacker appears to have focused on intercepting gift cards uploaded to peer-to-peer (P2P) trading platforms, allowing them to capture valuable card data before the normal transaction process was completed.
What did Cybernews researchers find:
According to Aras Nazarovas, Senior Information Security Researcher at Cybernews, platforms and their customers and sellers are potentially at risk, as customers would purchase redeemed gift cards, and it depends on how well the platform’s customer support handles these disputes.
For more information, read the article here:
https://cybernews.com/security/exposed-server-gift-card-fraud-operation-analysis
Share this:
Like this:
Related
This entry was posted on October 14, 2026 at 8:24 am and is filed under Commentary with tags Cybernews. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.