More than 2800 e-Shops Running Outdated Magento Software Hit by Credit Card Hackers

An influx of cyberattacks against retailers running the Magento 1.x web based business stage before this September has been ascribed to one single gathering, as indicated by the most recent exploration.

“This group has carried out a large number of diverse Magecart attacks that often compromise large numbers of websites at once through supply chain attacks, such as the Adverline incident, or through the use of exploits such as in the September Magento 1 compromises,” RiskIQ said in an analysis published today.

Collectively named Cardbleed, the attacks targeted at least 2,806 online storefronts running Magento 1.x, which reached end-of-life as of June 30, 2020.

Injecting e-skimmers on shopping websites to steal credit card details is a tried-and-tested modus operandi of Magecart, a consortium of different hacker groups who target online shopping cart systems.

These virtual credit card skimmers, also known as formjacking attacks, are typically JavaScript code that the operators stealthily insert into an e-commerce website, often on payment pages, with an intent to capture customers’ card details in real-time and transmit it to a remote attacker-controlled server.

If you have Magento version 1.x, you need to upgrade to version 2 to keep your Magento store safe.

Comments

Post a Comment

Popular posts from this blog

Vulnerable WordPress Plugin: WP File Manager v6.8

Every programmatical system; no matter what it is; has vulnerabilities. The only solution to keep your apps or websites safe, is to keep them updated and have a security firewall plugin. Recently, A Persistent Cross-Site Scripting Vulnerability has been discovered in WordPress Plugin WP File Manager v6.8 If you have version 6.8 of this plugin, you have to update it version 6.9 in order to keep your website safe. Don’t be late, update to keep your website info safe.
Read more

Update Your iPhone Now!

Apple on Thursday delivered different security updates to fix three zero-day weaknesses that were uncovered as being effectively misused in nature. Turned out as a feature of its iOS, iPadOS, macOS, and watchOS updates, the flaws reside in the FontParser component and the kernel, allowing adversaries to remotely execute arbitrary code and run malicious programs with kernel-level privileges. The zero-days were discovered and reported to Apple by Google’s Project Zero security team. “Apple is aware of reports that an exploit for this issue exists in the wild,” the iPhone producer said of the three zero-days without giving any extra subtleties in order to permit a dominant part of clients to introduce the updates. The rundown of affected gadgets incorporates iPhone 5s and later, iPod contact sixth and seventh era, iPad Air, iPad little 2 and later, and Apple Watch Series 1 and later. The fixes are accessible in variants iOS 12.4.9 and 14.2, iPadOS 14.2, watchOS 5.3.9, 6.2...
Read more

Nice Scrollbars Using React JS With Several Options

Image
Features frictionless native browser scrolling native scrollbars for mobile devices fully customizable auto hide auto height universal (runs on client & server) requestAnimationFrame for 60fps no extra stylesheets well tested, 100% code coverage React JS Scrollbars Usage Details You can view documentation and examples through the following link .
Read more