printcss.host Loads JavaScript Skimmer 0x2031
A JavaScript skimmer loading from a fake CSS request to URL printcss[.]host/styles.css which was injected into the Magento 2 database table cms_block.content.
Malware Disables Wordfence Security Plugin & Forges Timestamps
A malicious PHP file is used to take down Wordfence plugin before it adjusts its own mtime timestamp.
PHP Injector Makes Evil Use of error_log
A PHP backdoor that injects its payload into the default PHP error_log
m2cmds.php: Magento 2 Dev Tool or Deceptive Hacktool?
Is this m2cmds.php file an insecure third-party dev tool for Magento - or a malicious hacktool used by an attacker?
Skimmer Loaded Via Image On MemberPress Checkout Form & Magento
A payment card skimmer hidden within an existing PNG image on an infected WordPress website that uses MemberPress and collects payment data for private membership. A variant was also found stealing payment card information on an infected Magento website.