Security · Updated 26 Oct, 11:42 pm IST
Unknown Actor Infects 953 Online Stores with Malicious JavaScript
Why it matters for readers: It explains how attackers can hide JavaScript inside CMS components to avoid detection.
- Sansec reported 953 online stores were infected in a long‑running campaign.1
- Most of the compromised sites were running the Magento platform.1
- The attacker injects small pieces of code into store pages that serve a malicious JavaScript loader.1
- The injected code is delivered through Magento CMS blocks and is designed to evade scanners.1
Get a brief like this every morning
Uzha reads hundreds of sources and gives you the stories that matter for your work, with every source linked. Free.
Get started