GoKawiilChinese hacking ring stole $5M+ in gift cards via Staples internal system in 2023
A Chinese crime ring breached Staples' internal customer support tool, Nexus, and used heap dump requests to hijack logged-in employee sessions, enabling them to issue more than 15,000 fraudulent gift cards worth over $5 million. The cards were then quickly spent by 'runners' at retailers including Target, Sephora and Lowe's before they could be canceled. The breach, reported to Homeland Security Investigations in October 2023, only became public after a related search warrant was unsealed last week.