Magento adds 2FA to protect against card skimming attacks

guest · Jul 17, 2020

Magento adds 2FA to protect against card skimming attacks
July 17, 2020
https://www.bleepingcomputer.com/ne...2fa-to-protect-against-card-skimming-attacks/

Adobe has added two-factor authentication (2FA) throughout the Magento platform in response to the widespread number of attacks where skimmer scripts are deployed on hacked e-commerce sites to steal customers' credit cards.

"Using 2FA security will better protect you from malicious users attempting to perform unauthorized logins in three different areas: Magento.com accounts, Cloud Admin, and the Magento Admin," Adobe says.
The Magento 2FA extension supports multiple authenticators including but not limited to Google Authenticator, Authy, Duo, and U2F keys. 2FA applies to Magento Admin users only and it is not available for online store customer accounts.
Click to expand...

Compromised admin accounts behind 75% of Magecart attacks
According to the Adobe Security Operations team, roughly 75% of all web skimming (also known as Magecart or e-skimming) attacks were caused by the attackers being able to deploy card skimmer scripts on Magento Commerce websites via compromised admin accounts.

"While 2FA on the Magento Admin is optionally available on all supported versions of Magento Commerce, beginning with the release of 2.4, 2FA will be enabled by default for the Magento Admin and cannot be disabled," Adobe explains.
Click to expand...

Log in or Sign up

Magento adds 2FA to protect against card skimming attacks

guest Guest

Log in or Sign up

Magento adds 2FA to protect against card skimming attacks

guest Guest

Useful Searches