Industry observers highlight that the method could be used to carry out unauthorised transactions, redirect payments, or harvest credentials at scale. While no widespread exploitation has been ...