Hundreds of online web stores that sell counterfeit goods are affected by credit card skimmer that aimed to steal the customer credit card details.
Several counterfeit online shoe stores offer great deals for the popular brands, most of them are a fraud and these fraud stores attract another fraudulent activity now.
Malwarebytes identified a number of fraudulent sites that selling branded shoes that are infected with the credit card skimmers.
These skimmers get injected with the checkout page of the stores and they are capable of grabbing a credit card and personal details entered in the checkout pages of the website. The injected skimmers collect the details from the checkout pages and sent them to the attacker-controlled websites.
The fraudulent sites receive traffic from forums and through social media, “Crooks troll sporting and fitness forums and leave messages to entice users to visit the fake store.”
Here you can find some of the counterfeit site ads that selling popular brand stores such as Adidas, Nike, and other big brand name sneakers.
The obfuscated skimmer found to be injected with several Magento stores and the stolen data including billing addresses and credit card numbers is sent to a server hosted in China 103[.]139[.]113[.]34.
All the websites compromised are exploited using the same outdated software Magento under 1.9.4.2 and PHP under 5.6.40. “It’s likely a malicious scanner simply crawled those IP ranges and used the same vulnerability to compromise every one of those counterfeit sites.”
It is always recommended to buy the tickets from the official website, venue’s box office, reputable ticketing website or through official agent or partner.
Beware of the Fake apps and websites that promise you to get additional discounts, these bogus apps may enter into official play store also, be careful while installing those apps.
You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates
APT24, a sophisticated cyber espionage group linked to China's People's Republic, has launched a relentless…
The Cl0p ransomware group has claimed responsibility for infiltrating Broadcom's internal systems as part of…
Grafana Labs has disclosed a critical security vulnerability affecting Grafana Enterprise that could allow attackers…
A critical security vulnerability has been discovered in ASUSTOR backup and synchronization software, allowing attackers…
Microsoft has introduced a practical new feature in Windows 11 designed specifically for public-facing monitors…
SonicWall has disclosed a critical stack-based buffer overflow vulnerability in its SonicOS SSLVPN service. That…