Hackers Steal Accounts and Place Fake Food Delivery Orders on Deliveroo

Who ordered the £100 of burgers?

London food delivery juggernaut Deliveroo is under pressure after an investigation found hackers placing fake orders and selling off account details to the dark web. Opportunist thieves are putting groups of accounts up online, priced at a fraction of the credit available, with even more opportunist thieves buying those accounts and ordering themselves food, booze, and even cigarettes, according to the Mail on Sunday. The hacking problem has been resurgent since February, with credential stuffing — testing passwords from separate data breaches on multiple account-holding websites — taking advantage of the fact that an awful lot of people use the same password for nearly everything.

A Deliveroo spokesperson told the paper:

“We regularly introduce measures to combat fraudsters and to protect customer accounts. Unfortunately, cyber criminals rely on people reusing the same passwords on multiple online services and use data breaches elsewhere to try to gain access to other accounts online.”

That’s cold comfort to anyone settling in for a burger and finding that they’re paying for someone’s big night in 20 miles away. [Mail on Sunday]

And in other news...

• Plush Mayfair restaurant The Betterment goes two-for-two on bad reviews.
• Wetherspoons debuts a fake meat burger. [Mirror]
• Cadbury’s orange Twirl is now on sale, for limited edition chocolate heads. [Metro]
• Supermarket fave Lidl is building out online grocery delivery. [I News]
• Good tweet: