Which steps are taken during an account takeover scheme?

• A. Place orders using funds from the overtaken account
• B. Steal account login information using phishing emails
• C. Change customer contact information on the overtaken account
• D. All of the above

Answer: (D)

Account takeover schemes unfold in stages: first the attacker gains unauthorized access by stealing login information, often through phishing emails that trick the user into revealing credentials. Once inside, they typically change the account’s contact information so they can receive notifications, reset passwords, and keep control while evading detection. Finally, they monetize the access by placing orders or transferring funds from the account. Because these steps commonly appear together in real cases, the option that includes all of them is the best answer.