RiskIQ Researchers Track Ecommerce Threat, Discover Network of Threat Actors Reshipping Items Purchased with Stolen Cards
In October of last year, the RiskIQ Threat Research team released "Compromised E-commerce Sites Lead to 'Magecart," a report profiling the e-commerce threat they discovered and dubbed 'Magecart,' which injects JavaScript code into e-commerce sites running outdated and unpatched versions of shopping cart software from Magento, Powerfront, and OpenCart. By logging consumer keystrokes, these attackers capture large quantities of payment card information.
Now, by following a new strain of Magecart, the team has discovered a direct link to the outcome of the stolen credit cards for threat actors, offering rare insight into the physical world operations of actors tied to digital threats.
