A week in security (May 10 – 16)

A roundup of the previous week’s most interesting secrurity stories alongside the very best of our own research, from May 10 – 16.

Read more

Newly observed PHP-based skimmer shows ongoing Magecart Group 12 activity

This skimmer is using a hybrid approach to bypass detection and target vulnerable e-commerce websites.

Read more

Credit card skimmer piggybacks on Magento 1 hacking spree

It’s double trouble for Magento 1 sites when skimmers find themselves competing for resources.

Read more

Demystifying two common misconceptions with e-commerce security

HTTPS and iframe containers augment security, but are not a panacea for online shoppers and merchants.

Read more

Lock and Code S1Ep17: Journalism’s role in cybersecurity with Alfred Ng and Seth Rosenblatt

On the latest episode of Lock and Code, we talk to reporters Seth Rosenblatt and Alfred Ng about the role of journalism in cybersecurity.

Read more

Credit card skimmer targets virtual conference platform

Criminals have gone after an online conference platform to steal credit card data from virtual attendees.

Read more

Mobile network operator falls into the hands of Fullz House criminal group

The Fullz House threat group has struck again, this time inserting a credit card skimmer into a mobile phone operator and seller.

Read more

New web skimmer steals credit card data, sends to crooks via Telegram

Criminals steal payment data from online shoppers by abusing the Telegram instant messaging API, inserting credit card skimming code.

Read more

Inter skimming kit used in homoglyph attacks

Threat actors load credit card skimmers using a known phishing technique called homoglyph attacks.

Read more

Credit card skimmer targets ASP.NET sites

This unusual web skimmer campaign goes after sites running Microsoft’s IIS servers with an outdated version of the ASP.NET framework.

Read more

Select your language