Magento – Page 2 – Computer Security Articles

No man’s land: How a Magecart group is running a web skimming operation from a war zone

July 18, 2019 admin bulletproof, cybercrime, exfiltration, gate, hosting, IDN, luhansk, Magecart, Magento, skimmers, sniffers, swipers, Ukraine

Credit to Author: Threat Intelligence Team| Date: Thu, 18 Jul 2019 15:00:13 +0000

We take a look into a Magecart group’s web skimming activities, which are relying on a bulletproof-friendly host in battle-scarred Luhansk, Ukraine to provide cover for their activities, safe from the reach of law enforcement and the security community.

Categories:

Cybercrime

Tags: bulletproof exfiltration gate hosting IDN luhansk Magecart magento skimmers sniffers swipers ukraine

MalwareBytes Security

Skimmer acts as payment service provider via rogue iframe

May 21, 2019 admin credit card, cybercrime, E-commerce, hacked website, hacking, iframe, Magecart, Magento, malware, phishing, skimmer

Credit to Author: Jérôme Segura| Date: Tue, 21 May 2019 15:38:42 +0000

Even e-commerce sites that do not take payment information themselves can be abused by crooks. In this post, we show how a web skimmer is able to inject an artificial iframe into the checkout page to prompt users for their credit card information. Victims will only realize something’s not right when they are redirected to the real (and external) payment form.

Categories:

Tags: credit card e-commerce hacked website hacking iframe Magecart magento phishing skimmer

Security Sophos

Il tuo sito di e-commerce viene utilizzato per testare i dati delle carte rubate?

April 29, 2019 admin Carte di credito, Magento, Paypal, Protezione dei dati, Vulnerabilità

Credit to Author: Sophos Italia| Date: Fri, 05 Apr 2019 05:58:15 +0000

Se state usando Magento, vi suggeriamo di aggiornare subito.<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/qB71Yzvh4NE” height=”1″ width=”1″ alt=””/>

MalwareBytes Security

GitHub hosted Magecart skimmer used against hundreds of e-commerce sites

April 26, 2019 admin cybercrime, GitHub, Magecart, Magento, skimmer

Credit to Author: Jérôme Segura| Date: Fri, 26 Apr 2019 16:06:12 +0000

Magecart threat actors upload their skimming code onto GitHub in the latest attack against Magento websites.

Categories:

Cybercrime

Tags: GitHub Magecart magento skimmer

MalwareBytes Security

New Golang brute forcer discovered amid rise in e-commerce attacks

February 26, 2019 admin Bot, Botnet, bruteforce, Golang, googletagmanager, Magecart, Magento, skimmer, Threat analysis

Credit to Author: Jérôme Segura| Date: Tue, 26 Feb 2019 16:00:08 +0000

E-commerce sites are a hot commodity these days. We dig into how compromised PCs are helping to hack into them to inject skimmers, whether via vulnerabilities in the websites themselves or through a new malware we discovered gaining entry via brute force.

Categories:

Threat analysis

Tags: Bot botnet bruteforce Golang googletagmanager Magecart magento skimmer

MalwareBytes Security

How to protect your data from Magecart and other e-commerce attacks

September 28, 2018 admin breach, cybercrime, E-commerce, hacking, Magecart, Magento, skimmer, web skimmers

Credit to Author: Malwarebytes Labs| Date: Fri, 28 Sep 2018 15:00:57 +0000

Magecart and other criminal groups are causing mayhem by stealing payment information from e-commerce sites, big and small. Learn how they are doing it and how to mitigate against it.

Categories:

Tags: breach e-commerce Magecart magento skimmer web skimmers

Independent Krebs

Trump’s Dumps: ‘Making Dumps Great Again’

May 25, 2017 admin dark web, DomainTools.com, Home Depot breach, Magento, McDumpals, OpenCart, Other, Powerfront, rescator, RiskIQ, rudneva-y@mail.ua, Sally Beauty breach, target breach, Tor, Trump's-Dumps, U.S. Secret Service, U.S. Senate GOP Senatorial Committee hack

Credit to Author: BrianKrebs| Date: Fri, 26 May 2017 04:45:24 +0000

It’s not uncommon for crooks who peddle stolen credit cards to seize on iconic American figures of wealth and power in the digital advertisements for these shops that run continuously on various cybercrime forums. Exhibit A: McDumpals, a hugely popular carding site that borrows the Ronald McDonald character from McDonald’s and caters to bulk buyers. Exhibit B: Uncle Sam’s dumps shop, which wants YOU! to buy American. Today, we’ll look at an up and coming credit card shop called Trump’s-Dumps, which invokes 45’s likeness and promises to “make credit card fraud great again.”