article thumbnail

Patchman Now Protecting Ecommerce Sites

SiteLock

Now, for the first time, Patchman is expanding their offerings into both ecommerce and plugins – offering patches for Magento core vulnerabilities and WooCommerce vulnerabilities. Why Ecommerce? This growth brings with it, new opportunities for cybercriminals interested in stealing information or propagating malware.

article thumbnail

The Basics of eCommerce Website Security

SiteLock

To get you started, we cover four basic— yet essential —website security tips to protect your eCommerce site. PCI compliance is a security requirement created by major credit card brands in an attempt to reduce fraud and increase eCommerce security. You want more traffic to your eCommerce site. What is PCI compliance?

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

WordPress Plugin abused to install e-skimmers in e-commerce sites

Security Affairs

The malware has two main components. When the malware detects these parameters, it sends all the collected billing and credit card information to a third-party URL “hxxps://2of[.]cc/wp-content/” “In essence, ecommerce sites are prime targets for hackers due to the valuable data they handle.”

eCommerce 122
article thumbnail

Visa warns of new sophisticated credit card skimmer dubbed Baka

Security Affairs

Baka is a sophisticated e-skimmer developed by a skilled malware developer that implements a unique obfuscation method and loader. The skimmer loads dynamically to avoid static malware scanners and uses unique encryption parameters for each victim to obfuscate the malicious code.” ” reads the alert published by VISA.

eCommerce 137
article thumbnail

One in nine online stores are leaking your data, says study

Malwarebytes

eCommerce security company Sansec has revealed it's found a number of online stores accidentally leaking highly sensitive data. Check for unauthorized admin accounts. Run an eCommerce malware scanner. After studying 2,037 online stores, the company found that 12.3 Change all passwords.

article thumbnail

China and India present new Challenges and Opportunities for Mobile App Developers

Security Boulevard

Pinduoduo Malware highlights the need for App Attestation on a Global Scale The recent Pinduoduo hack may have impacted over 700 million users in China, and highlights the need for mobile app attestation to protect against mobile app malware and other vulnerabilities.

Mobile 52
article thumbnail

A new e-skimmer found on WordPress site using the WooCommerce plugin

Security Affairs

Experts from security firm Sucuri discovered a new e-skimmer software that is different from similar malware used in Magecart attacks. Naturally, WooCommerce and other WordPress-based ecommerce websites have been targeted before, but this has typically been limited to modifications of payment details within the plugin settings.”

eCommerce 144