A credit card skimming group has reportedly compromised a shared analytics script utilized by the e-commerce platform Convertr. The incident involved malicious actors injecting unauthorized code into the script to intercept and steal sensitive payment data from shoppers during the checkout process.
Digital skimming, often referred to as formjacking, typically involves the insertion of malicious JavaScript into legitimate web pages. By hijacking a shared script, attackers can ensure their malicious code executes whenever a user visits an affected site, allowing them to capture payment information in real-time as it is entered by the consumer.
Convertr provides analytics functionality used by various online retailers. The compromise of such a script presents significant security risks, as it potentially exposes data from multiple e-commerce storefronts that rely on the platform for their analytics services.
Source: BleepingComputer
Original article: https://www.bleepingcomputer.com/news/security/hackers-hijack-convertr-analytics-script-to-steal-payment-card-data/
Leave a Reply