Categories
Anti-malware

E-commerce site is infected not by one, but two card skimmers

Rival crime gangs race against each other to steal consumers’ personal data.

 

Dan Goodin –

 

Payment card skimming that steals consumers’ personal information from e-commerce sites has become a booming industry over the past six months, with high-profile attacks against Ticketmaster, British Airways, Newegg, and Alex Jones’ InfoWars, to name just a few. In a sign of the times, security researcher Jérôme Segura found two competing groups going head to head with each other for control of a single vulnerable site.

 

The site belongs to sportswear seller Umbro Brasil, which as of Tuesday morning was infected by two rival skimmer groups. The first gang planted plaintext JavaScript on the site that caused it to send payment card information to the attackers as customers were completing a sale. The malicious JavaScript looked like this:

 

Full Article.






Take a look at the best antivirus, anti-malware, anti-spy, etc. software