Over 750,000 websites require patching following discovery of DotNetNuke XSS vulnerability ...
The disguised apps use WebView automation, JavaScript injection, and OTP interception to avoid detection and complete fraudulent subscriptions.