Tags:
Our October 2024 eCommerce Security ThreatScape Report is ready and here are a few of the highlights:
Last month saw a slight decrease in the number of hacked sites detected across our portfolio, but that changed again this month, with the number of hacked sites surging up to 27,884.
The Top 5 most targeted platforms is slowly evolving, but the usual targets remain at the top:
Here's the report:

We find that most often, the sites that get targeted by criminals are those sites that are missing some of the basic fundamentals of good cyber security hygiene.
Conversely, it is rare to see an online business getting compromised by criminals when they are doing the basics well. This is a numbers game for the criminals - they are generally looking for an easy way to get their malware on as many sites as possible.
We consider the BASICS to be:
We can help with security monitoring and protection - try our ThreatView solution for free here.
If your agency/hosting provider is unable to help you with 1, 2 and 4, then please get in touch - we have a growing partner network of agencies and hosting providers who understand and prioritise security https://www.turacolabs.com/partners.
And if you are an agency/hosting provider looking to get proactive with security, please get in touch! https://www.turacolabs.com/agency-hosting
eCommerce ThreatScape - October 2024.pdf
Download PDF • 8.66MB
.
Over the last three months, the digital skimmer landscape has changed noticeably. Based on the latest ThreatView charts, Magento 2 remains the most targeted platform, but the biggest movement is elsewhere: Shopify has risen sharply and now appears to be the second most targeted platform for digital skimmers.
In February 2026, we detected 327 compromised PrestaShop websites running card-harvesting malware loaders or digital skimmer malware. By the beginning of June 2026, that number had risen to 1,068. This is an active, expanding campaign affecting a growing number of merchants.
A practical guide for Magento and Adobe Commerce merchants dealing with PolyShell: what it is, how to detect compromise, how ThreatView helps, and what to do next.