.wtf() Skimmer Targets WooCommerce PayPal Pro

.wtf() Skimmer Targets WooCommerce PayPal Pro
A JavaScript skimmer designed to steal payment data entered into the WooCommerce PayPal Pro gateway on the victim’s infected ecommerce website. Lowkey exfiltration domain: templatesurvey[.]com.
Read more →

Skimmer Targets SagePay Payment Method on Magento 2 Websites

Skimmer Targets SagePay Payment Method on Magento 2 Websites
A skimmer that steals payment data from customers that check out using the SagePay payment method.
Read more →

Magento PHP Skimmer - new validateData variant

Magento PHP Skimmer - new `validateData` variant
A variant of the validateData skimmer. This skimmer is saving payment data to a secondary file after the skimmer is injected into the Magento core file OnepageController.php.
Read more →

Magento 2 Skimmer Exfiltrates to Telegram Bot

Magento 2 Skimmer Exfiltrates to Telegram Bot
A JavaScript skimmer that exfiltrates stolen payment data to a Telegram bot that is under the attacker’s control.
Read more →

Magento PHP Skimmer - validateData

Magento PHP Skimmer - `validateData`
A PHP skimmer stealing payment data and user login data is injected into Magento core files OnepageController.php and User.php.
Read more →
Disclaimer: The research posted on this website is for information purposes only. Do not use it for illegal purposes.