Skip to content
securitytabs

Covered by 2 outlets — first reported by The Hacker News, Oct 26, 18:12 UTC

Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento

Summary

An unknown threat actor has infected 953 online stores, most of them running the Magento e-commerce platform, with JavaScript code designed to evade scanners, according to The Hacker News and Infosecurity Magazine. The Hacker News, citing Dutch e-commerce security company Sansec, says the campaign has been active since July 2025 and adds a small piece of code to store pages that serves a malicious JavaScript loader to visitors through Magento CMS blocks.

AI summary by the SecurityTabs newsroom, checked against The Hacker News, Infosecurity Magazine. Read the outlets below for the full story.

Continue reading

2 outlets, in the order they reported it.

  1. The Hacker NewsFirst report

    Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento

    An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025.

    Read at The Hacker News Details

  2. Infosecurity Magazine

    Hackers Infect 953 Online Stores With Scanner-Evading Code

    Attackers have infected 953 online stores with a scanner-evading JavaScript loader since July 2025

    Read at Infosecurity Magazine Details