ANY.RUN4d ago

🚨 A persistent #Magecart campaign ran undetected for 24+ months across 12+ countries, using 100+ domains to hijack payment flows. It’s now on the radar.

The financial and regulatory impact falls on banks and payment systems ❗️

Full breakdown and IOCs: https://any.run/cybersecurity-blog/banks-magecart-campaign/?utm_source=mastodon&utm_medium=post&utm_campaign=magecart_campaign&utm_term=310326&utm_content=linktoblog

#cybersecurity #infosec

ANY.RUNMar 26

🚨 We uncovered a large-scale #Magecart campaign running undetected for 24+ months across Spain, France & the US

100+ domains hijack payment flows to steal card data, creating sustained financial exposure for banks and enterprises

🎯 SOC-ready report: https://any.run/cybersecurity-blog/banks-magecart-campaign/?utm_source=mastodon&utm_medium=post&utm_campaign=magecart_campaign&utm_term=260326&utm_content=linktoblog

#cybersecurity #infosec

🦠Toxic Flange (Gurjeet)🔬⚱️🌚Jan 23

Oh goody, looks like #CanadaComputers in uh #Canada had #magecart style skimmer on their web checkout system.

It'll be months before they say or admit to anything i'm sure.

https://www.reddit.com/r/bapccanada/comments/1qk4axy/canada_computers_online_card_skimmer/

#infosec

CyberVeille.chJan 18
📢 Keylogger sur la boutique d’employés d’une des 3 plus grandes banques US (200 000+ exposés)
📝 Source : Sansec Forensics Team (Threat Research), avis publié le 15 janvier 2026.
📖 cyberveille : https://cyberveille.ch/posts/2026-01-16-keylogger-sur-la-boutique-demployes-dune-des-3-plus-grandes-banques-us-200-000-exposes/
🌐 source : https://sansec.io/research/keylogger-major-us-bank-employees
#IOC #Magecart #Cyberveille
Keylogger sur la boutique d’employés d’une des 3 plus grandes banques US (200 000+ exposés)

Source : Sansec Forensics Team (Threat Research), avis publié le 15 janvier 2026. Sansec rapporte avoir détecté un keylogger sur la boutique de produits dérivés destinée aux employés d’une des trois plus grandes banques américaines, active environ 18 heures avant retrait. L’attaque consiste en un keylogger/skimmer JavaScript côté client sur une boutique e‑commerce interne utilisée par 200 000+ employés. Le malware intercepte toutes les données de formulaire (identifiants, informations personnelles, numéros de cartes). Sansec souligne un écart de détection: au moment de la publication, 1/97 moteurs sur VirusTotal détectaient l’infrastructure malveillante.

CyberVeille
The Threat CodexJan 14
Silent Push Uncovers New Magecart Network: Disrupting Online Shoppers Worldwide
#Magecart
https://www.silentpush.com/blog/magecart/
Silent Push Uncovers New Magecart Network: Disrupting Online Shoppers Worldwide

Silent Push Preemptive Cyber Defense Analysts uncovered a vast Magecart network of domains associated with an ongoing web-skimmer campaign.

Silent Push
Hackread.comJan 13

Watch out as a new report reveals a widespread Magecart skimmer campaign targeting users of all major credit cards at online checkout.

Read more: https://hackread.com/magecart-targets-all-credit-cards-users/

#Magecart #CyberSecurity #OnlineShopping #InfoSec

Widespread Magecart Campaign Targets Users of All Major Credit Cards

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

TechNaduJan 13

Researchers uncover a long-running Magecart skimming network targeting major payment providers via compromised checkout pages.

https://www.technadu.com/new-magecart-skimming-network-targets-global-payment-providers-on-e-commerce-websites-including-mastercard-american-express/618163/

#Magecart #WebSkimming #PaymentSecurity

3NCR1PT4D0Jan 2

🧩 3️⃣ Masivo robo de datos de pago de clientes de páginas web con malware Magecart.

Cibercriminales han estado utilizando el malware Magecart para insertar código malicioso en tiendas online legítimas, de modo que captura datos de tarjetas de crédito y débito justo cuando los clientes compran.

Este código invisible roba números de tarjeta, fechas de vencimiento y códigos CVV, comprometiendo la seguridad de miles de personas sin que lo noten al comprar.

🔒 ¿Tus compras en línea son realmente privadas… o alguien más está leyendo lo que escribes?

#Privacidad #Ciberseguridad #Magecart #PagosOnline

https://blog.elhacker.net/2025/12/masivo-robo-de-datos-de-pago-de.html

News BeepNov 26

eCommerce platforms face AI-powered cyber threats for 2025 season

Organisations opera…
#NewsBeep #News #Headlines #Artificialintelligence(AI) #black-friday #christmas #cyberattacks #CyberThreat #Cybercrime #cybersecurity #digitalwallets #eCommerce(e-Commerce) #Fraud #holidayseason #IL #Israel #Magecart #Magento #Multi-factorauthentication(MFA) #OnlineShopping #PaymentTechnologies #phishing #SearchEngineOptimisation(SEO) #VirtualPrivateNetworks(VPNs) #WooCommerce
https://www.newsbeep.com/273216/

ITSEC NewsOct 22
Smashing Security podcast #440: How to hack a prison, and the hidden threat of online checkouts - A literal insider threat: we head to a Romanian prison where “self-service” web kiosks al... https://grahamcluley.com/smashing-security-podcast-440/ #smashingsecurity #securitythreats #vulnerability #paymentcard #guestblog #lawℴ #dataloss #magecart #podcast #romania #prison #pci
Smashing Security podcast #440: How to hack a prison, and the hidden threat of online checkouts

A literal insider threat: we head to a Romanian prison where “self-service” web kiosks allowed inmates to run wild. Then we head to the checkout aisle to ask…

Graham Cluley