[abillins31]

A hacker group called Magecart infiltrated the Newegg website and stole credit card details from the customers that used the site, it has been going on from August 14 to September 18 of this year. They did it by inserting a skimmer code into the payment processing page so as soon as customers add their credit card information it copies it.

https://thehackernews.com/2018/09/newegg-credit-card-hack.html

Topic

[joelfrenette]

The code was inserted into the checkout process page?
How can we mitigate this type of attack?

[peterbikeslc]

Thanks for the update. Browser vendors like Mozilla (for Firefox) and recently Apple for Safari pushed out updated versions that no longer support plug-ins, such as for java. Did Magecart exploit a vulnerability through a browser, or through a plugin, or something else completely?

[Author]

Replies