Tags:
Our September 2024 eCommerce ThreatScape Report is ready and here are a few of the highlights:
Yes, we have seen a slight decrease (of 1.9%) in the number of hacked sites, BUT we are detecting MORE malware (2-3% growth over last month's record) - many sites are riddled with many different types of malware.
And then, an interesting Top 5 most targeted platforms:
Here's the report:

Most often it is down to simple website management and cyber security hygiene. If you are doing the basics well, then your business is unlikely to fall victim - this is a numbers game and criminals are generally looking for an easy way to get their malware on as many sites as possible.
We consider the BASICS for eCommerce security to be:
We can help with security monitoring and protection - try our ThreatView solution for free here.
If your agency/hosting provider is unable to help you with 1, 2 and 4, then please get in touch - we have a growing partner network of agencies and hosting providers who understand and prioritise security https://www.turacolabs.com/partners.
And if you are an agency/hosting provider looking to get proactive with security, please get in touch! https://www.turacolabs.com/agency-hosting
eCommerce ThreatScape Report SEPTEMBER 2024.pdf
Download PDF • 12.18MB
.
Over the last three months, the digital skimmer landscape has changed noticeably. Based on the latest ThreatView charts, Magento 2 remains the most targeted platform, but the biggest movement is elsewhere: Shopify has risen sharply and now appears to be the second most targeted platform for digital skimmers.
In February 2026, we detected 327 compromised PrestaShop websites running card-harvesting malware loaders or digital skimmer malware. By the beginning of June 2026, that number had risen to 1,068. This is an active, expanding campaign affecting a growing number of merchants.
A practical guide for Magento and Adobe Commerce merchants dealing with PolyShell: what it is, how to detect compromise, how ThreatView helps, and what to do next.