Hackers breach Volusion and start collecting card details from thousands of sites

ronjor · Oct 8, 2019

By Catalin Cimpanu for Zero Day | October 8, 2019

More than 6,500 stores have been compromised, but the number could be around 20,000.
Click to expand...

guest · Oct 10, 2019

FIN6 Compromised E-commerce Platform via Magecart to Inject Credit Card Skimmers Into Thousands of Online Shops
October 9, 2019
https://blog.trendmicro.com/trendla...card-skimmers-into-thousands-of-online-shops/

All of the impacted online shops are hosted on the cloud platform of the e-commerce service provider “Volusion,” one of the top e-commerce platforms in the market.
These targets are obviously appealing to cybercriminals since they are connected to multiple — in this most recent case, thousands of — online shops.

During our investigation, we found that the attackers seemed more experienced and thoughtful than many other skimmer groups. They did not simply add their malicious code at the top or end of a script; instead, they carefully integrated the code into the original script to be part of the execution flow of the program. The code was also written as simply as possible, making it difficult to be identified in a big library.
Considering the modus operandi, we believe the attackers are from Magecart Group 6, which has also been identified as the notorious threat actor FIN6.
Click to expand...

guest · Mar 12, 2020

Card data from the Volusion web skimmer incident surfaces on the dark web
March 12, 2020
https://www.zdnet.com/article/card-...eb-skimmer-incident-surfaces-on-the-dark-web/

Card data stolen last year from Volusion-hosted online stores has surfaced on the dark web, Gemini Advisory, a threat intel firm specialized in fraud detection, reported today.
EXACT NUMBER OF IMPACTED STORES: 6,589
The Volusion hack was discovered on October 8, 2019, but Gemini researchers said today in a report shared with ZDNet that the breach dated back to a month earlier, on September 7.

Furthermore, researchers also said they found the malicious code to only 6,589 of Volusion's stores, reducing the impact of the breach's initially reported size of 20,000 potentially impacted stores.
However, while the breach was smaller, it wasn't less impactful.
Click to expand...

Gemini: Breached Volusion Card Data Surfaces in Dark Web

Fraudsters have currently generated $1.6 million USD in revenue from these stolen payment cards, with the breach potentially exposing up to 20 million records. As more records make their way to the dark web and more merchants are confirmed to have been compromised via Volusion, the full extent of what is likely to be one of the largest and most wide-ranging supply-chain breaches to date will become clear.
Click to expand...

Log in or Sign up

Hackers breach Volusion and start collecting card details from thousands of sites

ronjor Global Moderator

guest Guest

guest Guest

Log in or Sign up

Hackers breach Volusion and start collecting card details from thousands of sites

ronjor Global Moderator

guest Guest

guest Guest

Useful Searches