They don’t hack, they borrow: How fraudsters target credit unions

This report details a structured loan fraud method observed in underground groups where attackers use stolen identities and prepared KBA answers to navigate legitimate onboarding and lending workflows—targeting small- and mid-sized credit unions perceived as having weaker verification—to obtain loans and rapidly cash out funds.