Database could be accessed with an internet connection and a public IP address
The fraud collects a victim's email address, password and Monzo PIN - everything they need to compromise an account
SS7 vulnerabilities are being exploited by attackers to open wallets and bank accounts
Users are told that their non-existent 'iPhoneID' is expiring soon