Tags:
The eCommerce ThreatScape Report for August 2024 showed that the industry is facing a level of attack and compromise that we have not seen in nearly a decade of monitoring eCommerce websites for signs of data compromise.
Here are a few key highlights from the report:
There is a significant change taking place in the way criminals are targeting eCommerce websites - in response to the industry's capability to defend.
A few years ago, Digital Skimmers, like Magecart, were the dominant malware being deployed to steal payment card data from eCommerce sites.
The industry has largely figured out how to detect Magecart attacks, so the criminals have had to adapt to their current multi-stage attack approach.
This is what we are seeing now; infected sites with innocuous Digital Loader malware designed to bring in digital skimmers at the appropriate moment in the check out process.
Most security solutions do not know what Digital Loaders look like, or have limited experience with them, which is why we are detecting such a significant surge in Digital Loaders - we are seeing thousands and thousands of eCommerce sites infected with this cunning malware.
Read the report for more information on the eCommerce ThreatScape in August 2024:
eCommerce ThreatScape - August 2024.pdf
Download PDF • 12.25MB
If you do not have a free ThreatView account to detect this malware, please sign up and get ahead of the problem:
eCommerce businesses are facing a rapidly growing threat, targeting their payment data. This has been documented in our ThreatScape Reports over the years - and the most telling number for us is the total number of hacked sites we detect each time we conduct a global scan for threats across our portfolio - this morning's result reported over 48,000 sites detected with malware.
Magento 2 and Adobe Commerce users are currently dealing with a critical security crisis: the SessionReaper...
At Turaco Labs, we have identified a live digital skimmer (e-skimmer) that hijacks Stripe...