We probed 6,000 web apps for Stripe webhook signature checks. 1,542 don't bother

APT28 Targeted European Entities Using Webhook-Based Macro Malware