Hackers Hit U.S. Senate GOP Committee
Summary: Dutch researcher Willem De Groot reported that Russian hackers had for six months siphoned credit card data from visitors to the National Republican Senatorial Committee's web storefront, one of more than 5,900 e-commerce sites compromised by the same actors. The malware, planted via security vulnerabilities or weak passwords and hidden in site databases rather than files, sent stolen card data to servers run by a Russian-language ISP incorporated in Belize called dataflow.su, which markets itself as an offshore bulletproof hosting provider.
Why it matters: The attackers hid their code in e-commerce databases rather than files, so the filesystem checkers most merchants rely on would never fire - and De Groot found roughly 170 new sites compromised in the two days after his first scan of 5,900.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026