macOS

Hundreds of Fake Online Shoe Stores Injected With Credit Card Skimmer To Steal User Card Details

Hundreds of online web stores that sell counterfeit goods are affected by credit card skimmer that aimed to steal the customer credit card details.

Several counterfeit online shoe stores offer great deals for the popular brands, most of them are a fraud and these fraud stores attract another fraudulent activity now.

Credit Card Skimmer Injected on Online Shoe Stores

Malwarebytes identified a number of fraudulent sites that selling branded shoes that are infected with the credit card skimmers.

These skimmers get injected with the checkout page of the stores and they are capable of grabbing a credit card and personal details entered in the checkout pages of the website. The injected skimmers collect the details from the checkout pages and sent them to the attacker-controlled websites.

Skimmer Code

The fraudulent sites receive traffic from forums and through social media, “Crooks troll sporting and fitness forums and leave messages to entice users to visit the fake store.”

Here you can find some of the counterfeit site ads that selling popular brand stores such as Adidas, Nike, and other big brand name sneakers.

The obfuscated skimmer found to be injected with several Magento stores and the stolen data including billing addresses and credit card numbers is sent to a server hosted in China 103[.]139[.]113[.]34.

Botnet IPs used to Compromise Websites

All the websites compromised are exploited using the same outdated software Magento under 1.9.4.2 and PHP under 5.6.40. “It’s likely a malicious scanner simply crawled those IP ranges and used the same vulnerability to compromise every one of those counterfeit sites.”

It is always recommended to buy the tickets from the official website, venue’s box office, reputable ticketing website or through official agent or partner.

Beware of the Fake apps and websites that promise you to get additional discounts, these bogus apps may enter into official play store also, be careful while installing those apps.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates

Guru Baran

Gurubaran is the Co-Founder and Editor-in-Chief of CyberSecurityNews.com, specializing in vulnerability analysis, malware research, ransomware, and computer forensics.

Recent Posts

China-linked APT24 Hackers New BadAudio Compromised Legitimate Public Websites to Attack Users

APT24, a sophisticated cyber espionage group linked to China's People's Republic, has launched a relentless…

51 minutes ago

Broadcom Allegedly Breached by Clop Ransomware via E-Business Suite 0-Day Hack

The Cl0p ransomware group has claimed responsibility for infiltrating Broadcom's internal systems as part of…

1 hour ago

Critical Grafana Vulnerability Let Attackers Escalate Privilege

Grafana Labs has disclosed a critical security vulnerability affecting Grafana Enterprise that could allow attackers…

2 hours ago

Critical ASUSTOR Vulnerability Let Attackers Execute Malicious Code with Elevated Privileges

A critical security vulnerability has been discovered in ASUSTOR backup and synchronization software, allowing attackers…

2 hours ago

Windows 11 to Hide BSOD Crash Errors on Public Displays

Microsoft has introduced a practical new feature in Windows 11 designed specifically for public-facing monitors…

4 hours ago

SonicOS SSLVPN Vulnerability Let Attackers Crash the Firewall Remotely

SonicWall has disclosed a critical stack-based buffer overflow vulnerability in its SonicOS SSLVPN service. That…

6 hours ago