REVOLUT HACKERS USED INFOSTEALERS FOR ELABORATE SOCIAL ENGINEERING

Summary from the TLDR InfoSec newsletter

Attackers reportedly used stolen Italian government webmail credentials to send fraudulent European Investigation Orders to Revolut Bank UAB. They added recovery addresses, monitored inboxes, deleted outbound messages, and removed replies as .eml files. Hudson Rock identified roughly 300 compromised pec.interno.it logins, suggesting attackers may have used existing infostealer logs.