2022-08-25
:: Luke
#united81.com
#skimmer
#magecart
#fraud
#magento
#ecommerce
#JavaScript
#website malware
JavaScript code in the file /media/js/js-color.min.js
on an infected Magento website loads a skimmer and then exfiltrates the stolen data to the malicious domain united81.com
.
2022-07-20
:: Luke
#jsdelivr.at
#skimmer
#fraud
#magento
#ecommerce
#JavaScript
#website malware
A JavaScript injection found on a compromised Magento website loads a skimmer from jsdelivr.at
and then exfiltrates the stolen data back.
2022-06-16
:: Luke
#cdn-fonts.com
#skimmer
#fraud
#magento
#ecommerce
#JavaScript
#website malware
A JavaScript injection in the Magento database table core_config_data loads a skimmer and then exfiltrates the stolen data to the malicious domain cdn-fonts.com
.
2022-06-12
:: Luke
#staticounter.net
#skimmer
#fraud
#magento
#ecommerce
#JavaScript
#website malware
A JavaScript based skimmer loaded from an injection in the website’s Magento database table cms_block.
2021-12-30
:: Luke
#dyneff.fr
#Psigate
#psigate_cc_number
#t87588
#Magento
#ecommerce
#skimmer
#JavaScript
#website malware
Analysis of an obfuscated JavaScript skimmer designed to steal payment data entered into the Psigate gateway fields on the victim’s infected ecommerce website. Exfiltration domain: …