MageCart

A new Magecart campaign hides the malicious code in 404 error pageA new Magecart campaign hides the malicious code in 404 error page

A new Magecart campaign hides the malicious code in 404 error page

Researchers observed a new Magecart web skimming campaign changing the websites' default 404 error page to steal credit cards. Researchers from the…

2 years ago
Magecart campaign abuses legitimate sites to host web skimmers and act as C2Magecart campaign abuses legitimate sites to host web skimmers and act as C2

Magecart campaign abuses legitimate sites to host web skimmers and act as C2

A new ongoing Magecart web skimmer campaign abuse legitimate websites to act as makeshift command and control (C2) servers. Akamai…

2 years ago
Hacker stole credit cards from the website of Canada’s largest alcohol retailer LCBOHacker stole credit cards from the website of Canada’s largest alcohol retailer LCBO

Hacker stole credit cards from the website of Canada’s largest alcohol retailer LCBO

The Canadian Liquor Control Board of Ontario (LCBO), the largest beverage alcohol retailer in the country, disclosed Magecart attack. Canadian…

2 years ago
Researchers analyzed a new JavaScript skimmer used by Magecart threat actorsResearchers analyzed a new JavaScript skimmer used by Magecart threat actors

Researchers analyzed a new JavaScript skimmer used by Magecart threat actors

Researchers from Cyble analyzed a new, highly evasive JavaScript skimmer used by Magecart threat actors. Cyble Research & Intelligence Labs…

3 years ago
Magecart attacks are still around but are more difficult to detectMagecart attacks are still around but are more difficult to detect

Magecart attacks are still around but are more difficult to detect

Researchers from Malwarebytes warns that the Magecart skimming campaign is active, but the attacks are more covert. Magecart threat actors…

3 years ago
Threat actors compromised +500 Magento-based e-stores with e-skimmersThreat actors compromised +500 Magento-based e-stores with e-skimmers

Threat actors compromised +500 Magento-based e-stores with e-skimmers

Experts uncovered a mass Magecart campaign that compromised over 500 e-store running the Magento 1 eCommerce platform. Researchers from cybersecurity…

3 years ago
Segway e-store compromised in a Magecart attack to steal credit cardsSegway e-store compromised in a Magecart attack to steal credit cards

Segway e-store compromised in a Magecart attack to steal credit cards

Segway e-store suffered a Magecart attack that potentially allowed threat actors to steal credit cards and customer info. The online…

3 years ago
New Linux CronRAT hides in cron jobs to evade detection in Magecart attacksNew Linux CronRAT hides in cron jobs to evade detection in Magecart attacks

New Linux CronRAT hides in cron jobs to evade detection in Magecart attacks

Security researchers discovered a new Linux RAT, tracked as CronRAT, that hides in scheduled cron jobs to avoid detection. Security…

4 years ago
New Magecart group uses an e-Skimmer that avoids VMs and sandboxesNew Magecart group uses an e-Skimmer that avoids VMs and sandboxes

New Magecart group uses an e-Skimmer that avoids VMs and sandboxes

A new Magecart group leverages a browser script to evade virtualized environments and sandboxes used by researchers. Malwarebytes researchers have…

4 years ago
Magecart hackers hide stolen credit card data into images and bogus CSS filesMagecart hackers hide stolen credit card data into images and bogus CSS files

Magecart hackers hide stolen credit card data into images and bogus CSS files

Magecart hackers continuously improve their exfiltration techniques to evade detection, they are hiding stolen credit card data into images. Magecart…

4 years ago