Backdoor found in popular ecommerce components

FanJ · May 3, 2025 at 8:52 AM

Sansec Forensics Team
Published in Threat Research − May 01, 2025
https://sansec.io/research/license-backdoor

Multiple vendors were hacked in a coordinated supply chain attack, Sansec found 21 applications with the same backdoor. Curiously, the malware was injected 6 years ago, but came to life this week as attackers took full control of ecommerce servers. Sansec estimates that between 500 and 1000 stores are running backdoored software.
Click to expand...

Hundreds of stores, including a $40 billion multinational, are running backdoored versions of popular ecommerce software. We found that the backdoor is actively used since at least April 20th. Sansec identified these backdoors in the following packages which were published between 2019 and 2022.
Click to expand...

Read there more.

==========

Article in Dutch at security.nl
'Honderden webshops getroffen door backdoor in Magento-extensies'
https://www.security.nl/posting/886...getroffen door backdoor in Magento-extensies'

Log in or Sign up

Backdoor found in popular ecommerce components

FanJ Updates Team

Log in or Sign up

Backdoor found in popular ecommerce components

FanJ Updates Team

Useful Searches