Magento Credit Card Stealer Disguised in an <img> Tag

SUMMARY :

A sophisticated credit card stealing malware, disguised within an

tag, was discovered on a Magento-based eCommerce website. The malware uses Base64 encoding to hide its malicious JavaScript code, making it difficult to detect. It activates on the checkout page, waiting for user interaction before collecting credit card information. The script creates a hidden form to capture card details and sends the data to a remote server. This technique allows the malware to avoid detection by security scanners and remain unnoticed by users. The article emphasizes the importance of keeping eCommerce platforms updated, using web application firewalls, enforcing strong passwords, and implementing additional security measures to protect against such attacks.

OPENCTI LABELS :

magento,credit card theft,magecart,javascript injection,ecommerce,base64 encoding,

tag,web security


Open in NetmanageIT OpenCTI Public Instance with below link!


Use public read only username and password on login page.

NOTE : Use Public READ only user credentials on login page banner.


Magento Credit Card Stealer Disguised in anTag