Magento skimmer campaign hits 953 stores across five domains
Sansec says deepveindrilling.com, registered October 6, was loaded by 83 mostly Magento stores from October 7.
1
Stories per day · 30 days
3 RSS
10 stories, newest first · one card per story
Stories tagged #web-skimmer
Sansec: 953 online stores, mostly Magento, hit by scanner-evading JavaScript
Loaders in Magento CMS blocks fetch follow-on code only for real shoppers; the final payload is still unknown.
2
953 online stores infected with Magento JavaScript loaders since July 2025
Sansec says loaders on five domains fingerprint visitors and have not yielded a captured final payload.
3
AI tools help hacker break in for $25 per target
AI-driven campaign compromised 27 of 105 retailers and stole about 600,000 card numbers.
3
Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs
An operator used three open-source AI agents to compromise at least 27 organizations and steal over 600,000 card records.
1
Malicious AI agents steal 600K credit cards, infect 100+ sites with skimmers
An AI-agent campaign stole over 600,000 cards and skimmer-infected at least 119 retail sites.
2
Hackers Abuse Google Sheets to Hijack Crypto Wallet Addresses in ClickFix Attacks
Cisco Talos details a crypto-theft ClickFix campaign abusing Google Sheets to swap wallet addresses, with about $10,000 in observed Bitcoin losses.
2
Hackers Abuse Google Sheets as C2 in ClickFix Attacks to Steal Cryptocurrency
Cisco Talos tracks a ClickFix crypto-theft campaign using Google Sheets as C2 to swap deposit addresses in Chrome.
1
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2
Talos tracks a crypto-theft campaign abusing the Google Visualization API for C2, using browser-based ClickFix lures to inject web-skimmer JavaScript.
Recent Trends in Internet Threats: Common Industries Impersonated in Phishing Attacks, Web Skimmer Analysis and More
Unit 42 analyzed 67 million malicious URLs and domains in H2 2022, a 52% increase, highlighting phishing impersonation and web skimmer trends.
2