Tech News
← Home  ·  All topics

Magecart

2 GoKawiil briefs on this topic

Report URI finds 15,579 websites infected with malicious JavaScript, struggles to notify them

Security firm Report URI says its threat intelligence tools have identified 15,579 compromised websites, collectively receiving an estimated 135 million visits a month. The infections include credit card skimmers, ClickFix malware traps, device-exploitation code and malicious redirects, introduced either through direct site compromises like WordPress flaws or via infected third-party scripts loaded by the sites.

Convertr's Plausible analytics script hijacked to skim card data at Brazilian checkouts

Security firm Sansec says a Brazilian credit-card skimming group compromised a shared Plausible analytics tracker hosted on e-commerce platform Convertr's infrastructure, injecting malicious code that loads on checkout pages across the dozens of fashion merchants it serves. The skimmer, identified on October 24 and refined by October 26 to match Convertr's specific payment API fields, was designed to capture card numbers, expiration dates, CVVs, cardholder names and CPF tax IDs.