2022-08-25
:: Luke
#united81.com
#skimmer
#magecart
#fraud
#magento
#ecommerce
#JavaScript
#website malware
JavaScript code in the file /media/js/js-color.min.js
on an infected Magento website loads a skimmer and then exfiltrates the stolen data to the malicious domain united81.com
.
2022-07-20
:: Luke
#jsdelivr.at
#skimmer
#fraud
#magento
#ecommerce
#JavaScript
#website malware
A JavaScript injection found on a compromised Magento website loads a skimmer from jsdelivr.at
and then exfiltrates the stolen data back.
2022-06-16
:: Luke
#cdn-fonts.com
#skimmer
#fraud
#magento
#ecommerce
#JavaScript
#website malware
A JavaScript injection in the Magento database table core_config_data loads a skimmer and then exfiltrates the stolen data to the malicious domain cdn-fonts.com
.
2022-06-12
:: Luke
#staticounter.net
#skimmer
#fraud
#magento
#ecommerce
#JavaScript
#website malware
A JavaScript based skimmer loaded from an injection in the website’s Magento database table cms_block.
2022-01-04
:: Luke
#ccfresh[.]co
#Stripe
#stripe_token_params
#Prestashop
#ecommerce
#skimmer
#JavaScript
#website malware
A basic JavaScript skimmer injected into a Prestashop website. Exfiltration domain: …