Skimmer Targets SagePay Payment Method on Magento 2 Websites
A skimmer that steals payment data from customers that check out using the SagePay payment method.
Magento 2 Skimmer Exfiltrates to Telegram Bot
A JavaScript skimmer that exfiltrates stolen payment data to a Telegram bot that is under the attacker’s control.
printcss.host Loads JavaScript Skimmer 0x2031
A JavaScript skimmer loading from a fake CSS request to URL printcss[.]host/styles.css which was injected into the Magento 2 database table cms_block.content.
Skimmer Loaded Via Image On MemberPress Checkout Form & Magento
A payment card skimmer hidden within an existing PNG image on an infected WordPress website that uses MemberPress and collects payment data for private membership. A variant was also found stealing payment card information on an infected Magento website.
Magento PHP Injection Loads JS Skimmer
A JavaScript skimmer that conditionally loads from malicious PHP code injected into a Magento file.