Convertr

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 26, 2026
Last mentioned3d ago

Timeline

2 articles · newest first

Attackers hijack Convertr analytics script to skim checkout card data

Sansec says a Brazilian gang altered Convertr’s Plausible tracker; the skimmer was later removed and Plausible upgraded to a patched version.

BleepingComputerOct 27, 20:57 UTC · 3d agoMalware 2 sourcesCVE-2026-8467

Magecart skimmer hits Convertr checkouts through Plausible tracker

Sansec says the tracker was still serving the skimmer on October 26 and that card data plus CPF was posted to 1x0.is.

Sansec (Magento / e-commerce security)updated Oct 27, 20:57 UTC · 3d agofirst Oct 26, 00:00 UTC · 5d agoMalware 2 sourcesCVE-2026-84672 · 1 read

Related CVEs

by mentions

CVE-2026-8467<1%9.5
Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in…
published May 20, 2026

Appears with

Sansecorganization · 2
Convertrvendor · 1
WooCommerceproduct · 1
OpenCartproduct · 1
Plausibleproduct · 1
Brazilian Magecart groupthreat actor · 1
Plausible Community Editionproduct · 1
Magentoproduct · 1
Plausiblevendor · 1
Magecartthreat actor · 1

Entities are extracted by the model from each article. First seen Oct 26, 2026, last mentioned 3d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.