Who’s In Your Online Shopping Cart?

Summary: Krebs on Security documented card-skimming code hidden on e-commerce sites, including asianfoodgrocer-dot-com, which loads a script hosted on the hacked Ghanaian store zoobashop-dot-com, and look-alike domains such as bargalnjunkie-dot-com that swap an 'i' for a lowercase 'L'. Searches on publicwww.com found more than 50 merchants pulling code from bootstrap-js-dot-com and at least a dozen loading js-react-dot-com, while none of the sites named were flagged by the more than five dozen antivirus tools at virustotal.com.
What's compelling: Symantec said it blocked almost a quarter of a million formjacking attempts between mid-August and September 2018, and the scripts sit in existing checkout pages where file-integrity tools like Tripwire and AIDE may not catch them.

Read the original at Krebs on Security ↗

Topics: Data Breaches
Related: TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026
Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026
City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026