One of the UK’s largest energy firms has been forced to deactivate its mobile app after reports emerged of a coordinated credential stuffing campaign against users. Npower has informed all of the affected customers, although it’s unclear exactly how many had their accounts hijacked by attackers.

Read full article on Infosecurity