Security Affairs

AUGUST 31, 2019

The financially-motivated hacking group FIN6 is switching tactics, passing from PoS attacks to the hack of e-commerce websites. FIN6 hackers first compromise the target websites with a backdoor tracked as More_eggs JScript backdoor malware (a.k.a. SecurityAffairs – FIN6, hacking). and Europe. . Pierluigi Paganini.

eCommerce 109

eCommerce Advertising Hacking Malware 109

Security Affairs

APRIL 10, 2025

“These technologies are primarily used by small- to medium-sized businesses for their ease in enabling website development with integrations for eCommerce, website content management, and business service offerings.” .” reads the report published by SentinelOne.

eCommerce 130

eCommerce Technology DNS Business Services 130

Security Affairs

DECEMBER 2, 2021

Threat actors are targeting e-stores with remote access malware, dubbed NginRAT, that hides on Nginx servers bypassing security solutions. While investigating CronRAT infections in North America and Europe the researchers spotted a new malware, dubbed NginRAT, that hides on Nginx servers bypassing security solutions.

Malware 142

Malware eCommerce Hacking Information Security 142

Security Affairs

SEPTEMBER 6, 2020

Baka is a sophisticated e-skimmer developed by a skilled malware developer that implements a unique obfuscation method and loader. The skimmer loads dynamically to avoid static malware scanners and uses unique encryption parameters for each victim to obfuscate the malicious code.” SecurityAffairs – hacking, Baka e-skimmer).

eCommerce 144

eCommerce Malware Encryption Advertising 144

Security Affairs

APRIL 12, 2020

Experts from security firm Sucuri discovered a new e-skimmer software that is different from similar malware used in Magecart attacks. Naturally, WooCommerce and other WordPress-based ecommerce websites have been targeted before, but this has typically been limited to modifications of payment details within the plugin settings.”

eCommerce 145

eCommerce Malware Advertising Software 145

Security Affairs

NOVEMBER 18, 2021

The attackers initially conducted a reconnaissance phase by probing the e-store with automated eCommerce attack probes. “At the time of writing, no other anti-virus vendor recognize this malware. Curiously, one individual had submitted the same malware to Virustotal on Oct 8th with the comment “test”.”

Software 119

Software eCommerce Malware Engineering 119

Security Affairs

FEBRUARY 10, 2022

Experts uncovered a mass Magecart campaign that compromised over 500 e-store running the Magento 1 eCommerce platform. Researchers from cybersecurity firm Sansec uncovered a massive Magecart campaign that already compromised more than 500 online stores running the Magento 1 eCommerce platform. com domain. com domain.

eCommerce 102

eCommerce Malware Hacking Cybersecurity 102

Security Boulevard

MAY 28, 2021

Recently, a client’s customers were receiving a warning from their anti-virus software when they navigated to the checkout page of the client’s ecommerce website. Antivirus software such as Kaspersky and ESET would issue a warning but only once a product had been added to the cart and a customer was about to enter their payment information.

eCommerce 143

eCommerce Antivirus Software Malware 143

SiteLock

AUGUST 27, 2021

Abby’s Flower Shop Delivers Fresh Malware to Your Door. One day, much to Abby’s surprise, she was notified by her hosting provider that her website was suspended due to malware. Abby can use a website scanner to find malware on her site. If malware is found, she is alerted immediately.

Hacking 98

Hacking DDOS eCommerce Firewall 98

Security Affairs

DECEMBER 5, 2022

Resecurity has identified a new underground marketplace in the Dark Web oriented towards mobile malware developers and operators. This trend comes from the “Man in The Browser” (MiTB) attacks and WEB-injects designed for traditional PC-based malware such as Zeus, Gozi and SpyEye.

Mobile 108

Mobile Malware Banking Retail 108

Security Affairs

FEBRUARY 14, 2022

Last week, researchers from cybersecurity firm Sansec uncovered a massive Magecart campaign that already compromised more than 500 online stores running the Magento 1 eCommerce platform. More than 350 ecommerce stores infected with malware in a single day. SecurityAffairs – hacking, Magento). com domain.

eCommerce 98

eCommerce Malware Authentication Hacking 98

Security Affairs

JUNE 22, 2022

We're right on the heels of Magecart cybercriminals New malware domain found: scanalytic[.org link] #Magecart #ecommerce pic.twitter.com/p3C4EOXh3C — Sansec (@sansecio) June 9, 2022. net injected into #magento db and loading #JavaScript on a hacked store's checkout page. SecurityAffairs – hacking, Magecart).

eCommerce 132

eCommerce InfoSec Malware Hacking 132

Security Affairs

DECEMBER 9, 2021

This makes any malware injected into these files very easy to spot even by less experienced website administrators. “If you operate an eCommerce website, be sure to be extra cautious during the holiday season. SecurityAffairs – hacking, e-skimmer). The next logical step for them would be to target plugin and theme files.”

eCommerce 124

eCommerce Firewall Malware Hacking 124

Security Affairs

MAY 28, 2024

The malware has two main components. When the malware detects these parameters, it sends all the collected billing and credit card information to a third-party URL “hxxps://2of[.]cc/wp-content/” “In essence, ecommerce sites are prime targets for hackers due to the valuable data they handle.”

eCommerce 138

eCommerce Firewall Malware Passwords 138

Webroot

APRIL 22, 2025

Data breaches occur when sensitive, protected, or confidential data is hacked or leaked from a company or organization. Retail and e-commerce: Retail and ecommerce businesses are vulnerable to breaches because they handle and store vast amounts of customer payment information, including addresses, credit card numbers and more.

Data breaches 75

Data breaches Identity Theft Passwords eCommerce 75

Security Affairs

AUGUST 4, 2019

Crooks used rare Steganography technique to hack fully patched websites in Latin America. Jessica Alba ‘s Twitter account hacked, it posted racist and homophobic messages. Android devices could be hacked by playing a video due to CVE-2019-2107 flaw. Malware researchers analyzed an intriguing Java ATM Malware.

Data breaches 95

Data breaches eCommerce Hacking Cyber Attacks 95

Security Affairs

JULY 10, 2020

Evilnum threat actor was first spotted in 2018 while using the homonym malware. Over the years, the group added new tools to its arsenal, including custom and homemade malware along with software purchased from the Golden Chickens malware-as-a-service (MaaS) provider. SecurityAffairs – hacking, Evilnum).

eCommerce 135

eCommerce Malware Advertising Spyware 135

Security Affairs

SEPTEMBER 1, 2019

Experts uncovered a hacking campaign targeting several WordPress Plugins. Internal Revenue Service warns taxpayers of a malware campaign. Nemty Ransomware, a new malware appears in the threat landscape. Kaspersky found malware in popular CamScanner app. Magecart hackers compromise another 80 eCommerce sites.

eCommerce 75

eCommerce Data breaches Malware Advertising 75

Security Affairs

JANUARY 21, 2020

The company immediately launched an investigation that revealed that a third-party ecommerce platform, Salesforce Commerce Cloud, was infected with an e-skimmer. The malware was completely removed on November 11, 2019. SecurityAffairs – Hanna Andersson , hacking). Pierluigi Paganini.

Data breaches 137

Data breaches Retail Identity Theft eCommerce 137

Security Affairs

AUGUST 31, 2022

The extensions a designed to track the user’s browsing activity, they are also able can insert code into eCommerce websites being visited. They do this so that they can insert code into eCommerce websites being visited. . js that sends every URL visited by the victims to the C2 and injects code into the eCommerce sites.

eCommerce 98

eCommerce Retail Authentication Hacking 98

Security Affairs

JANUARY 26, 2020

“This group had a serious impact on global ecommerce security in recent years, by skimming at least 571 hacked stores.” SecurityAffairs – Magecart, hacking). ” concluded the experts. “However, they were responsible for just 1% of all Magecart incidents since 2018 and should be considered small catch. .”

Computers and Electronics 143

Computers and Electronics eCommerce Advertising Cybercrime 143

Security Affairs

SEPTEMBER 2, 2022

JavaScript #skimmer overlayed onto payment page of an infected #Magento ecommerce store to steal payment card data from visitors exfils to united81[.]com com #magecart #infosec #cybersecurity #malware [link] pic.twitter.com/x8VrkKzXPc — Luke Leal (@rootprivilege) August 26, 2022. SecurityAffairs – hacking, Log4Shell).

eCommerce 102

eCommerce Digital transformation InfoSec Media 102

Security Affairs

OCTOBER 15, 2019

Pitney Bowes is a global technology company that provides commerce solutions in the areas of ecommerce, shipping, mailing, data and financial services. “Pitney Bowes was affected by a malware attack that encrypted information on some systems and disrupted customer access to some of our services. ” . . Pierluigi Paganini.

Ransomware 107

Ransomware eCommerce Financial Services Advertising 107

Security Affairs

NOVEMBER 17, 2022

In September 2022, Sansec researchers warned of a surge in hacking attempts targeting a critical Magento 2 vulnerability tracked as CVE-2022-24086. ” reads the report published by the experts “The trend in recent weeks paints a grim picture for ecommerce DevOps teams worldwide for the coming weeks.”

eCommerce 141

eCommerce Hacking Authentication Technology 141

SiteLock

AUGUST 27, 2021

In fact, shipping experts like FedEx, are predicting another record-breaking year of shipments driven by eCommerce purchases. Even more alarming is the fact that eCommerce sites are 1.5 So what’s an eCommerce retailer to do? In fact, recent data indicates that websites are attacked an average of 22 times per day.

Retail 52

Retail eCommerce Hacking Malware 52

Security Affairs

SEPTEMBER 18, 2020

Ransomware , the headliner of the previous half-year, walked off stage: only 1 percent of emails analyzed by Group-IB’s Computer Emergency Response Team (CERT-GIB) contained this kind of malware. SecurityAffairs – hacking, ransomware). Pandemic chronicle. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

Phishing 136

Phishing Ransomware Spyware Banking 136

Security Boulevard

MAY 28, 2021

Recently, a client’s customers were receiving a warning from their anti-virus software when they navigated to the checkout page of the client’s ecommerce website. Antivirus software such as Kaspersky and ESET would issue a warning but only once a product had been added to the cart and a customer was about to enter their payment information.

eCommerce 83

eCommerce Antivirus Software Malware 83

Security Affairs

AUGUST 1, 2018

An employee at Amnesty International has been targeted with Israeli surveillance malware, the news was revealed by the human rights group. Amnesty International revealed that one of its employees was targeted with a surveillance malware developed by an Israeli firm. com , and ecommerce-ads[.]org.” com , pine-sales[.]com

Surveillance 67

Surveillance Malware Spyware Mobile 67

Security Affairs

JULY 28, 2019

They infect computers and other devices with malware to record payment information when their owners buy from ecommerce sites. Cards with CVV numbers were more popular, in part because the ability to fabricate new cards to be used in-person is far more difficult than using an ecommerce site.”

eCommerce 111

eCommerce Marketing Advertising Accountability 111

Security Affairs

FEBRUARY 8, 2020

Such type of data is likely to have been compromised online — with the use of phishing, malware, or JS-sniffers — while in the previous case, we dealt with card dumps (the information contained in the card magnetic stripe), which can be stolen through the compromise of offline POS terminals, for example. Pierluigi Paganini.

Banking 145

Banking Marketing eCommerce Advertising 145

SiteLock

AUGUST 27, 2021

Our security analysts were furiously working to manually clean malware from a number of WordPress sites. Our security analysts recognized they were cleaning the same malware strain found in the Yuzo zero-day exploit. My heart sank, and I was faced with exactly what I was afraid of, my site had been hacked,” Swanson said.

Malware 98

Malware Firewall eCommerce Hacking 98

Security Boulevard

MARCH 24, 2023

Pinduoduo Malware highlights the need for App Attestation on a Global Scale The recent Pinduoduo hack may have impacted over 700 million users in China, and highlights the need for mobile app attestation to protect against mobile app malware and other vulnerabilities.

Mobile 52

Mobile eCommerce Malware Hacking 52

SiteLock

AUGUST 27, 2021

30% of all malware cleaned by SiteLock’s Expert Services is located inside website databases. That’s why we launched SMART® Database (SMART/DB™) two years ago, automatically detecting spam or malware found within critical WordPress database tables. Manual malware scanning is a thing of the past with the new SMART/DB scanner.

Small Business 98

Small Business Malware eCommerce Retail 98

Security Affairs

MARCH 14, 2019

According to IRP, UK market research firm, a minimum conversion into purchase for fashion and clothing ecommerce is equal to 1%. We dubbed this JS Sniffer family GMO because the malware uses gmo[.]li JS Sniffers is a type of malware that remains poorly researched. According to Alexa.com, the number of fila.co [.]uk

eCommerce 110

eCommerce Marketing Data breaches Advertising 110

Security Affairs

NOVEMBER 26, 2020

All of the 90,000 pieces analysed by Group-IB included full card data – cards compromised via phishing websites, from end devices infected with banking Trojans, as well as by the means of hijacked eCommerce websites and the use of JS-sniffers. SecurityAffairs – hacking, Carding). Pierluigi Paganini.

Cybercrime 123

Cybercrime eCommerce Banking Marketing 123

SiteLock

AUGUST 27, 2021

Tony Spiridigliozzi is the founder of the successful eCommerce website Airspeed-Wireless.com. Unfortunately it did not and the hacking attempts continued. The hacker injected malware into the newly developed site and taunted Spiridigliozzi by engaging him in online chat. Company Background. Solution and Result.

Wireless 52

Wireless eCommerce Malware Firewall 52

Security Affairs

MARCH 28, 2019

Security experts at Group-IB have detected the activity of Gustuff a mobile Android Trojan, which includes potential targets of customers in leading international banks, users of cryptocurrency services, popular ecommerce websites and marketplaces. Gustuff has previously never been reported.

Banking 111

Banking Cryptocurrency Mobile Advertising 111