validateData skimmer. This skimmer is saving payment data to a secondary file after the skimmer is injected into the Magento core file OnepageController.php.
Magento PHP Skimmer - new validateData variant
A variant of the
Magento 2 Skimmer Exfiltrates to Telegram Bot
A JavaScript skimmer that exfiltrates stolen payment data to a Telegram bot that is under the attacker’s control.
Magento PHP Skimmer - validateData
A PHP skimmer stealing payment data and user login data is injected into Magento core files OnepageController.php and User.php.
Spox is Dila Belimi
Hi my name is Spox (Dila Belimi) and I like to steal from average people during a global pandemic.
Phishers Target Vonage/Nexmo API
A phishing kit targeting both the login information and also the API key for Vonage API users (previously Nexmo). The stolen API can then be used to send and receive SMS, or even calls, from a large selection of clean numbers.