Mass WP Infection: trainresistor.cc
A large attack campaign that has been targeting vulnerable WordPress websites and using JavaScript injections to redirect victims to scams or malicious URLs.
Magento PHP One-Liner Backdoor
Analysis of a PHP one-liner found injected on Magento ecommerce websites and learn how it is used by attackers.
.wtf() Skimmer Still Targeting WooCommerce Websites
Almost identical to the one from back in March 2021 except this uses convert-server.com as the exfiltration domain.
N26 Bank Phishing Kit & Panel Sends Custom Push Notifications
A phishing kit targeting the German bank N26.com and exfiltrating the stolen data to a third party hosted phishing panel which in turn immediately sends a push notification to the attacker.
