Lazarus Group Adds Magecart to the Mix

🗓️ 06 Jul 2020 17:18:59Reported by Tara SealsType

The Lazarus Group adds Magecart payment card skimming, targeting retailers like Claire’s for American and European shoppers. They use spearphishing to plant theft scripts, leading to a global exfiltration network.

Reporter	Title	Published	Views	Family All 148
0day.today	Magento 2.4.0 / 2.3.5p1 (and earlier) Arbitrary Code Execution 0day Exploit	24 Mar 202100:00	–	zdt
ATTACKERKB	CVE-2020-24407	15 Oct 202023:00	–	attackerkb
BDU FSTEC	The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of measures to protect SQL query structures. This allows attackers to execute arbitrary SQL queries against the database in the target system and gain access to protected information.	12 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of restrictions on file uploads, which allows attackers to execute arbitrary code.	17 Nov 202000:00	–	bdu_fstec
Circl	CVE-2020-24400	15 Oct 202023:29	–	circl
Circl	CVE-2020-24407	15 Oct 202023:29	–	circl
CNVD	Adobe Magento SQL Injection Vulnerability	19 Oct 202000:00	–	cnvd
CNVD	Adobe Magento File Upload List Bypass Vulnerability	19 Oct 202000:00	–	cnvd
CVE	CVE-2020-24400	9 Nov 202000:39	–	cve
CVE	CVE-2020-24407	9 Nov 202000:39	–	cve

Source	Link
threatpost	www.threatpost.com/newsletter-sign/
threatpost	www.threatpost.com/macys-data-breach-linked-to-magecart/150393/
sansec	www.sansec.io/research/north-korea-magecart
threatpost	www.threatpost.com/claires-customers-magecart-payment-card-skimmer/156552/
threatpost	www.threatpost.com/u-s-ties-lazarus-to-north-korea-and-major-hacking-conspiracy/137264/
threatpost	www.threatpost.com/lazarus-tactics-cryptocurrency-attacks/143249/
attendee	www.attendee.gotowebinar.com/register/441045308082589963
attendee	www.attendee.gotowebinar.com/register/441045308082589963

06 Jul 2020 17:18Current

EPSS0.0552