article thumbnail

Google Suspends Chinese E-Commerce App Pinduoduo Over Malware

Krebs on Security

28, 2023, researchers at the Chinese security firm DarkNavy published a blog post purporting to show evidence that a major Chinese ecommerce company’s app was using this same three-exploit chain to read user data stored by other apps on the affected device, and to make its app nearly impossible to remove. .

Malware 272
article thumbnail

That Domain You Forgot to Renew? Yeah, it’s Now Stealing Credit Cards

Krebs on Security

Julierandallphoto-dot-com is now one of hundreds of fake ecommerce sites set up to steal credit card details. ” The report tracks the work of Magecart — the name given to a collective of at least seven cybercrime groups involved in hacking Web sites to steal payment card data.