Researchers Identify Backdoor Methods to Access Magento

guest · Aug 13, 2021

Researchers Identify Backdoor Methods to Access Magento
Sucuri Offers Advice on Risk Mitigation
August 12, 2021
https://www.bankinfosecurity.co.uk/researchers-identify-backdoor-methods-to-access-magento-a-17268

Researchers at website security company Sucuri have discovered five backdoor methods to access Adobe's Magento e-commerce platform, potentially enabling capture of credit card details or administrator login credentials.

The backdoors, which the researchers say evade common detection techniques and provide attackers remote code execution privileges, were found during an investigation of a compromised Magento environment.
Click to expand...

The five distinct backdoor methods discovered during the investigation are:

Reflection Functions

forward_static_call()

register_tick_function()

session_set_save_handler()

ZipArchive()

Click to expand...

Preventive Measures
Sucuri advises e-commerce sites that use Magento to perform integrity checks on their websites to detect these infections. Systems performing integrity checks will track any modifications to site files and can help find malware that would have otherwise gone undetected, Sucuri says.

Monitoring access logs can also help detect malicious activities and backdoors, the security firm notes.
Click to expand...

Sucuri: Examining Unique Magento Backdoors

During a recent investigation into a compromised Magento ecommerce environment, we discovered the presence of five different backdoors that would provide attackers with code execution capabilities. The techniques used by the attackers in these backdoors illustrates the ever-changing landscape of website security and highlights some of the tactics used to avoid traditional backdoor detection.
Click to expand...

Log in or Sign up

Researchers Identify Backdoor Methods to Access Magento

guest Guest

Log in or Sign up

Researchers Identify Backdoor Methods to Access Magento

guest Guest

Useful Searches