Originally Posted by SmokeyTheBear

if anyone wants to know how real a possibilty someone could obtain cc info from this , its very simple if you have been inside nats.

edit the templates place a hidden script on the signup page , this redirects certain ip blocks to a fake mockup of the billers signup page , cc card are stolen and stored , voila.. would take all of 20 minutes to do .

doesnt need cc info to be stored by nats or the sponsor encrypted or unencrypted.

thats why i said NO INITIAL EVIDENCE , i.e. i have seen nothing to suggest the above scenario took place , but its WELL within the hackers power and a VERY REAL and possible scenario.