It has been reported that security from Aite Group and Arxan Technologies, after a thorough investigation, discovered that hackers from the Magecart group are targeting online stores. This, they said, has been observed again in the past. The hackers have compromised 80 other eCommerce sites by stealing credit card data.
All of these sites were found to have one thing in common. They were using an outdated version of Magento, making the sites vulnerable to formjacking and digital card skimming . What’s impressive is that it only took 2.5 hours of research to identify these 80 compromised eCommerce sites
The activities of the Magecart groups have been monitored since 2015. They usually place skimming scripts on online stores in order to steal debit and credit card data. Of course, not all Magecart groups are equally advanced. In particular, Group 4 seems to be the most sophisticated of all. Over the years, they have attacked many sites, such as British Airways, Newegg, Ticketmaster, MyPillow and Amerisleep, and Feedify. Furthermore, experts report that these 80 eCommerce sites were targeted by more than 1 Magecart group.
To conduct the research , Aite Group used a source code search engine to identify JavaScript that has been repeatedly found in past Magecart attacks.
As we mentioned before, the common element of the victims was the deficient protection and error handling of the sites. The versions used by most Magecart teams are 1.5, 1.7 or 1.9. This makes them more vulnerable.
Although the investigation is still ongoing, the researchers have reported their findings to the relevant authorities and the sites involved. However, they have not yet officially named the sites.
The research also showed that once the credit card data is obtained, hackers either sell it on the dark web or purchase products in online stores.
