Von wegen sichere Online-Shops: Private Daten oft frei zugänglich

Viele vermeintlich sichere Online-Shops scheitern schon allein daran, dass sie ihre Backups in öffentlich verfügbaren Verzeichnissen ablegen.

Tarnkappe.info

Хакеры используют Google Apps Script в атаках web-скиммеров #скиммер, #Magecart, #Sansec https://t.co/6bDwK1Twfy https://t.co/4osS548aVK

Источник: https://twitter.com/SecurityLabnews/status/1362695932681326594

Хакеры используют Google Apps Script в атаках web-скиммеров

Киберпреступники пользуются тем фактом, что online-магазины принимают домен Apps Script как доверенный.

Novel Online Shopping Malware Hides in Social-Media Buttons - The skimmer steals credit-card data, using steganography to hide in plain sight in seemingly benig... https://threatpost.com/online-shopping-malware-social-media-buttons/161903/ #paymentcardskimmer #socialmediabuttons #vulnerabilities #holidayshopping #onlineshopping #steganography #websecurity #e-commerce #malware #breach #sansec #hacks
Novel Online Shopping Malware Hides in Social-Media Buttons

The skimmer steals credit-card data, using steganography to hide in plain sight in seemingly benign images.

Threatpost - English - Global - threatpost.com
Хакеры прячут скимминговое ПО за иконками соцсетей

Новая тактика позволяет скрывать скиммеры от сканеров безопасности, проверяющих допустимый синтаксис.

Magecart Attack Impacts More Than 10K Online Shoppers - Close to 2,000 e-commerce sites were infected over the weekend with a payment-card skimmer, maybe ... https://threatpost.com/magecart-campaign-10k-online-shoppers/159216/ #paymentcardskimmer #stolencreditcards #vulnerabilities #e-commercesites #onlineshoppers #zerodayexploit #largecampaign #websecurity #magecart #malware #magento #hacked #sansec #hacks
Magecart Attack Impacts More Than 10K Online Shoppers

Close to 2,000 e-commerce sites were infected over the weekend with a payment-card skimmer, maybe the result of a zero-day exploit.

Threatpost - English - Global - threatpost.com
Hidden Kobra beißt wieder zu: Kreditkarteninfos landen bei Hackern

Die Hackerbande Hidden Kobra soll seit einem Jahr, Kreditkarteninfos von US-amerikanischen, aber auch europäischen Kunden abgefangen haben.

Tarnkappe
Lazarus Group Adds Magecart to the Mix - North Korea-based APT is targeting online payments made by American and European shoppers. more: https://threatpost.com/lazarus-group-adds-magecart/157167/ #onlinepayments #lazarusgroup #paymentcards #websecurity #cardskimmer #e-commerce #northkorea #magecart #sansec #hacks
Lazarus Group Adds Magecart to the Mix

North Korea-based APT is targeting online payments made by American and European shoppers.

Threatpost - English - Global - threatpost.com