- Attackers exploited a flaw in Robinhood’s account creation emails to inject phishing content
- Fake warnings from [email protected] redirected victims to credential‑stealing landing pages
- The vulnerability has been fixed, and no customer accounts or funds were compromised
Cybercriminals are abusing Robinhood to successfully land phishing emails into victim’s inboxes in a bid to steal login credentials, experts have warned.
