Collaborate Disseminate
Too many online store administrators are storing private backups in public folders and exposing database passwords, secret API keys, administrator URLs and customer data to attackers who know where to look. “Exposed secrets have been used to gain… Continue reading Attackers are searching for online store backups in public folders. Can they find yours?
FishPig, a UK-based company developing extensions for the popular Magento open-source e-commerce platform, has announced that its paid software offerings have been injected with malware after its distribution server was compromised. How the attackers c… Continue reading Attackers mount Magento supply chain attack by compromising FishPig extensions
The entry points for Magecart and other e-commerce skimmers are changing, but the attackers are getting more clever, too.
The post For Magecart groups and other credit-card skimmers, old and new opportunities abound appeared first on CyberScoop.
The skimmer steals credit-card data, using steganography to hide in plain sight in seemingly benign images. Continue reading Novel Online Shopping Malware Hides in Social-Media Buttons
Close to 2,000 e-commerce sites were infected over the weekend with a payment-card skimmer, maybe the result of a zero-day exploit. Continue reading Magecart Attack Impacts More Than 10K Online Shoppers
Your payment card information got stolen but you don’t know how, when and where? Maybe you shopped on one of the 570 webshops compromised by the Keeper Magecart group (aka Magecart Group 8) since April 1, 2017. Magecart Group 8’s modus oper… Continue reading Magecart Group 8 skimmed card info from 570+ online shops
North Korea-based APT is targeting online payments made by American and European shoppers. Continue reading Lazarus Group Adds Magecart to the Mix
Magecart attackers have compromised web shops belonging to large retail chains Claire’s and Intersport and equipped them with payment card skimmers. Claire’s The compromise of Claire’s online store and that of its sister brand Icing h… Continue reading Magecart attackers hit Claire’s, Intersport web shops