Covered by 2 outlets — first reported by SecurityWeek, Oct 26, 12:46 UTC
953 Online Stores Infected in Long-Lasting Malware Campaign
Summary
A criminal group has infected 953 online stores, mostly built on the Magento shopping platform, according to researchers at Sansec cited by Security Affairs. The attackers add a small piece of code to store pages that serves a malicious payload to some visitors. SecurityWeek says the code either delivers the payload or does nothing, which helps it avoid detection. Security Affairs reports the campaign has run since July 2025, uses five domains and filters out bots.
AI summary by the SecurityTabs newsroom, checked against SecurityWeek, Security Affairs. Read the outlets below for the full story.
Continue reading
2 outlets, in the order they reported it.
SecurityWeekFirst report
953 Online Stores Infected in Long-Lasting Malware Campaign
Small loader code injected into the stores served a payload to visitors or did nothing to avoid detection.
Security Affairs
Magento Campaign Infects 953 Online Stores Across Five Domains
Sansec tracks a Magento skimmer campaign that infected 953 stores, using five domains, bot filtering and malicious code hidden in CMS blocks.