Eskenzi PR ad banner Eskenzi PR ad banner
  • About Us
Wednesday, 1 February, 2023
IT Security Guru
Eskenzi PR banner
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
IT Security Guru
No Result
View All Result

RiskIQ Detects And Mitigates New Magecart Supply Chain Attack.

by The Gurus
December 5, 2018
in Opinions & Analysis
RISKIQ LOGO
Share on FacebookShare on Twitter

RiskIQ, the global leader in digital risk management, today reveals it helped mitigate and prevent damages from yet another attempted large-scale supply chain attack by the well-known credit card-skimming gang, Magecart. Magecart is the umbrella term given to seven similar groups implicated in the breaches of Ticketmaster, British Airways, and Newegg.

With its internet-scale visibility and its detection algorithms now well-honed on the Magecart skimmer, RiskIQ was automatically alerted to the compromise of Shopper Approved, a customer rating plugin that integrates with thousands of e-commerce sites. As observed in the July Magecart attack against Ticketmaster, this attack did not attempt to breach a single store directly, but rather a widely used third-party that gives attackers access to thousands of sites at once.

RiskIQ’s researchers immediately reached out to Shopper Approved to provide information and assistance with remediation. Since the incident, RiskIQ has been in frequent contact with the company, which removed the skimmer and launched a full-scale internal investigation using a leading forensics firm to determine how the breach happened and which sites were affected.

“On behalf of Shopper Approved, I want to personally thank the RiskIQ team for the diligence and incredible effort they’ve taken in helping us detect and secure our code in such a short amount of time,” said Shopper Approved co-founder and CEO Scott Brandley. “It is rare when you find a company like RiskIQ who genuinely helps people, simply because it is the right thing to do. RiskIQ helped significantly limit the impact caused by Magecart – and for that, we will be forever grateful.”

While Shopper Approved is active on thousands of websites, due to early mitigation efforts and the fact that the skimmer only appeared on a small percentage of the checkout pages, Magecart impacted only a fraction of these sites. RiskIQ stresses that during this time of heightened Magecart activity, e-commerce sites should be monitoring their checkout pages closely.

“If you own an e-commerce company, it’s best to remove the third-party code from your checkout pages whenever possible,” said Yonathan Klijnsma, head researcher at RiskIQ. “Many payment service providers have already taken this approach by prohibiting third-party code from running on pages where customers enter their payment information.”

As Magecart groups evolve—initial attacks involved low-tier Magento stores and have grown in sophistication to target CDNs, which the threat actors now tune to ensure the only sites they hit are online stores—any supplier of functionality to online e-commerce websites is a potential victim. RiskIQ, which detects internet-scale threats, is alerted to new Magecart breaches hourly, a clear indication that the group is extremely active and a genuine threat to all organisations offering online payment facilities.

RiskIQ is monitoring all Magecart groups and will continue to report publicly on their activity. For a full analysis of this campaign, including a list of compromised components and IOCs, visit the report here: https://www.riskiq.com/blog/labs/magecart-shopper-approved/

About RiskIQ
RiskIQ is the leader in digital threat management, providing the most comprehensive discovery, intelligence, and mitigation of threats associated with an organisation’s digital presence. With more than 75 percent of attacks originating outside the firewall, RiskIQ allows enterprises to gain unified insight and control over web, social and mobile exposures. Trusted by tens of thousands of security analysts, security teams and CISO’s, RiskIQ’s platform combines advanced internet data reconnaissance and analytics to expedite investigations, understand digital attack surfaces, assess risk and take action to protect the business, brand and customers. Based in San Francisco, the company is backed by Summit Partners, Battery Ventures, Georgian Partners and MassMutual Ventures.

[tpr-boilerplate company=’null’]

FacebookTweetLinkedIn
ShareTweetShare
Previous Post

Malaysia Seeks GDPR-Style Data Protection Laws

Next Post

Kaspersky Lab Technology Detects A Zero-Day Exploit For Microsoft Windows In The Wild.

Recent News

JD Sports admits data breach

JD Sports admits data breach

January 31, 2023
Acronis seals cyber protection partnership with Fulham FC

Acronis seals cyber protection partnership with Fulham FC

January 30, 2023
Data Privacy Day: Securing your data with a password manager

Data Privacy Day: Securing your data with a password manager

January 27, 2023
#MIWIC2022: Carole Embling, Metro Bank

#MIWIC2022: Carole Embling, Metro Bank

January 26, 2023

The IT Security Guru offers a daily news digest of all the best breaking IT security news stories first thing in the morning! Rather than you having to trawl through all the news feeds to find out what’s cooking, you can quickly get everything you need from this site!

Our Address: 10 London Mews, London, W2 1HY

Follow Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

This site uses functional cookies and external scripts to improve your experience.

Privacy settings

Privacy Settings / PENDING

This site uses functional cookies and external scripts to improve your experience. Which cookies and scripts are used and how they impact your visit is specified on the left. You may change your settings at any time. Your choices will not impact your visit.

NOTE: These settings will only apply to the browser and device you are currently using.

GDPR Compliance

Powered by Cookie Information