highMalware
Hackers Infect 953 Online Stores with Scanner-Evading JavaScript
An unknown threat actor has compromised 953 online stores, the majority running Magento, as part of a long-running campaign that began in July 2025. According to Dutch e-commerce security firm Sansec, the attack injects small pieces of code into store pages via Magento CMS blocks. When users visit these pages, malicious JavaScript loader code is served, designed to evade security scanners. The campaign poses risks of credential theft, payment card skimming, and further malware delivery to visitors of the affected stores.
The Hacker News1 min read