How to Protect Holiday Shoppers from Bots and Scammers

It’s the most wonderful time of year for gift card scammers. With Black Friday, Cyber Monday and the holidays just around the corner, consumers will spend billions on gift cards for hard-to-shop-for friends, family, and colleagues. Imperva VP Tiffany Olson Kleemann was interviewed on Good Morning...

Magecart Group Switches Up Tactics with MiTM, Phishing

A fresh splinter group under the Magecart umbrella has been discovered ramping up activity starting in August-September of 2019. It’s using a unique codebase and different tactics to carry out its attacks, according to researchers. Magecart is an umbrella term encompassing several different threa...

File upload vulnerability in the pr***.cl***.php file of the Laikai e-commerce system

Laike e-commerce system is an open source e-commerce system. A file upload vulnerability exists in the pr.cl.php file of Laikai E-commerce System. Attackers can use this vulnerability to obtain server privileges...

SQL injection vulnerability in the us***.cl***.php file of Laikai e-commerce system

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system us.cl.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in the backend ge***.cl***.php file of Laikai E-commerce system

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system backend ge.cl.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in the fo***.class.php file of Laikai e-commerce management system

Laike e-commerce management system is an open source e-commerce management system. Laike e-commerce management system fo.class.php file SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information...

Macy's Suffers Data Breach by Magecart Cybercriminals

The department store Macy’s is warning that web skimmer malware was discovered on Macys.com collecting customers’ payment card information. The attack has been linked to Magecart, a notorious umbrella group made up of various cybercriminal affiliates that is known for injecting payment card...

Pipka Card Skimmer Removes Itself After Infecting eCommerce Sites

A new JavaScript payment card skimmer, dubbed Pipka, has been identified on at least seventeen merchant websites attempting to target site visitors’ payment data. Unlike other skimmers, Pipka removes itself from the HTML code of compromised websites after exfiltrating payment card data – a...

Holiday Shoppers Beware: 100K Malicious Sites Found Posing as Well-Known Retailers

As the holiday season looms, cybercrooks are going after shoppers with more than 100,000 lookalike domains mimicking legitimate retailers. The news comes as a new report shows that in tandem, the retail industry is experiencing more breaches than any other industry in 2019 as criminals consistent...

SQL injection vulnerability in the en***.cl***.php file of Laikai e-commerce system

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system en.cl.php file has a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in in***.php file of Laikai e-commerce system (CNVD-2020-00182)

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system in.php file contains a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in in***.php file of Laikai e-commerce system (CNVD-2020-00184)

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system in.php file contains a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

Magento Warns E-Commerce Sites to Upgrade ASAP to Prevent Attacks

The popular e-commerce platform Magento is urging web administrators to install its latest security update in order to defend against malicious attacks in the wild that could exploit a critical remote code-execution vulnerability. While the company didn’t specify what kinds of potential attacks...

Magento cross-site scripting vulnerability (CNVD-2019-40741)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. Magento has a cross-site scripting vulnerability. Attackers can use this vulnerability to execute client-side code...

Magento cross-site scripting vulnerability (CNVD-2019-40738)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. Magento has a cross-site scripting vulnerability. Attackers can use this vulnerability to execute client-side cod...

Magento Remote Code Execution Vulnerability (CNVD-2019-40726)

Magento is an open source PHP e-commerce system from the U.S. company Magento. A remote code execution vulnerability exists in Magento. An attacker can exploit this vulnerability to achieve remote code execution...

Magento Remote Code Execution Vulnerability (CNVD-2019-40728)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A remote code execution vulnerability exists in Magento. An attacker can exploit this vulnerability to execute co...

Magecart Groups Attack Simultaneous Sites in Card-Theft Frenzy

In an interesting development on the financial cybercrime scene, different Magecart groups have been spotting stepping over each other and attacking the same sites. Magecart is an umbrella term encompassing several different threat groups who all use the same modus operandi: They compromise...

Magecart Gang Targets Skin Care Site Visitors For 5+ Months

The website of popular skin care brand First Aid Beauty has been hacked by the infamous Magecart group, which embedded digital card skimmers on the site to steal visitors’ payment-card information. The skimmers were undetected on the website for more than five months. First Aid Beauty is an...

Tips for Securing Online Payments

Understand how e-commerce transactions work, what a payment gateway is, and how to keep your online payments secure. Online businesses mean even more reliance of customer trust, which means higher security. The post Tips for Securing Online Payments appeared first on Wallarm Blog...