Mobile transactions could’ve been disabled, created and signed by attackers.
Source: Threadpost