Robinhood onboarding flaw exploited to send phishing emails

Attackers have taken advantage of a security flaw in Robinhood's onboarding process that allows HTML injection into account confirmation emails. This vulnerability enables the delivery of phishing emails that look authentic, originating from Robinhood's own systems. The phishing emails direct recipients to fraudulent websites, increasing the risk of credential theft and fraud. This incident highlights the importance of securing email generation processes to prevent exploitation by threat actors.