All posts in e-commerce

Take payments, manage your inventory, provide support, and track every sale. Image: StackCommerce For any retail business, selling online is almost essential. But if you don’t have experience in ecommerce, figuring out how to set up and optimize your own digital storefront can be a daunting task. Gigrove provides a . . . Read more

Don’t keep calling home to a JavaScript server that closed its doors eight years ago!
04 Dec, 2020
Breach, e-commerce, Hacks, holiday shopping, Malware, online shopping, payment card skimmer, sansec, Security News, social media buttons, steganography, Vulnerabilities, Web Security
0
The skimmer steals credit-card data, using steganography to hide in plain sight in seemingly benign images. A payment card-skimming malware that hides inside social-media buttons is making the rounds, compromising online stores as the holiday shopping season gets underway. According to researchers at Sansec, the skimmer hides in fake social-media . . . Read more
01 Dec, 2020
Affable Kraut, Credential Theft, credit card skimmer, e-commerce, Hacks, magecart, online shopping, PayPal, postMessage, Security News, threat actors, twitter, Web Security
0

New credit-card skimmer uses postMessage to make malicious process look authentic to victims to steal payment data. Just in time for a busy online holiday shopping season, the Magecart gang has come up with a new credit-card skimming technique for hijacking PayPal transactions during checkout. A security researcher who identifies . . . Read more
06 Nov, 2020
Bug, Code Injection, Denial of Service, e-commerce, information disclosure, patch, PHP Object Injection, plugin, Security News, security vulnerability, Vulnerabilities, Web Security, welcart, WordFence, wordpress
0

The shopping cart application contains a PHP object-injection bug. A security vulnerability in the Welcart e-Commerce plugin opens up websites to code injection. This can lead to payment skimmers being installed, crashing of the site or information retrieval via SQL injection, researchers said. Welcart e-Commerce is a free WordPress plugin . . . Read more
28 Oct, 2020
Allan Liska, Breach, card skimmer, COVID-19, DDoS attacks, ddos extortion, e-commerce, Fraud, holiday shopping, loyalty points, loyalty programs, magecart, Malware, Matt Wilson, NeuStar, NuData, online retail, online sales, online shoppers, online shopping, Pandemic, Phishing, phishing lures, Recorded Future, Robert Capps, Scam, secure checkout, Security News, Videos, Vulnerabilities, WAF, web application firewall, Web Security, Webinars
0

How a retail sector reeling from COVID-19 can lock down their online systems to prevent fraud during the upcoming holiday shopping spike. The raging pandemic has forced many retailers to re-imagine their businesses, shifting from in-person to contactless interactions through online sales. This new socially distanced reality is colliding with . . . Read more
06 Oct, 2020
boom mobile, Breach, credit card skimmer, Customer Data, e-commerce, fullz house, Hacks, magecart, Malware, Security News, Vulnerabilities, Web Security, website, wireless service provider
0

The administrator of your personal data will be Threatpost, Inc., 500 Unicorn Park, Woburn, MA 01801. Detailed information on the processing of personal data can be found in the privacy policy. In addition, you will find them in the message confirming the subscription to the newsletter.
02 Oct, 2020
2020 Digital Trust & Safety Index, Account Takeover Fraud, ato, ATO Attack, Biometrics, BOPIS, buy online pay in store, captcha, cyber criminal, Cyber security, Data security, digital security, e-commerce, Fraud, Fraud victim, hack, hacker, Most Recent ThreatLists, Online banking, online data, online merchant, online shopping, Online Theft, Security News, Sift, Two Factor Authentication, Web Security
0

The administrator of your personal data will be Threatpost, Inc., 500 Unicorn Park, Woburn, MA 01801. Detailed information on the processing of personal data can be found in the privacy policy. In addition, you will find them in the message confirming the subscription to the newsletter.