HOW A MASSIVE CHINESE CRIME RING HACKED STAPLES TO STEAL MILLIONS

Summary from the TLDR InfoSec newsletter

404 Media reports on a Chinese threat actor that compromised Staples to issue over $5M worth of gift cards that were used to funnel goods back to Chinese addresses. The actors found a way to access Staples' Nexus service, which it believed was only exposed internally, and performed heap dumps to hijack sessions of logged-in Staples customer service representatives. The attackers used 4,630 gift cards totaling around $425K.