PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Magecart Strikes Again: Newegg in the Crosshairs

volexity.com | research | #vulnerability-research | #threat-intelligence | #crimeware | #credit-card-theft | #magecart
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Volexity has conducted the following research in collaboration with RiskIQ. We will discuss the same incident from different perspectives. RiskIQ’s report of this activity can be seen here. In another […]
Published
Collected

Related coverage

research · volexity.com
JS Sniffer: E-commerce Data Theft Made Easy
In late 2017, Volexity began tracking a new e-commerce financial data theft framework named JS Sniffer. The framework gives attackers a quick and efficient way to steal data from compromised […]
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · volexity.com
XE Group – Exposed: 8 Years of Hacking & Card Skimming for Profit
In 2020 and 2021, Volexity identified multiple compromises related to a relatively unknown criminal threat actor that refers to itself as “XE Group”. Volexity believes that XE Group is likely […]
research · volexity.com
Digital Crackdown: Large-Scale Surveillance and Exploitation of Uyghurs
Over the last several years, numerous reports have emerged regarding the shocking treatment of Uyghurs, a Muslim minority ethnic group that makes up a large part of the Xinjiang Uyghur […]
research · volexity.com
Sophisticated Phishing Campaign Targets Corporate Credentials
Volexity has been tracking a series of phishing campaigns focused on harvesting Microsoft Office 365 account credentials. While many commodity phishing kits are available to purchase containing Office 365 themes, […]
research · volexity.com
OceanLotus Blossoms: Mass Digital Surveillance and Attacks Targeting ASEAN, Asian Nations, the Media, Human Rights Groups, and Civil Society
In May 2017, Volexity identified and started tracking a very sophisticated and extremely widespread mass digital surveillance and attack campaign targeting several Asian nations, the ASEAN organization, and hundreds of […]
Back