BigCommerce has started alerting merchants that customer data was stolen from their stores after attackers got hold of API credentials belonging to Ribon, a third-party storefront optimization app used by retailers across the platform. The stolen credentials gave attackers access to customer records inside merchant accounts on BigCommerce... Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
BigCommerce Merchants Hit in Supply Chain Breach After Ribon App Credentials Were Stolen
BigCommerce has started alerting merchants that customer data was stolen from their stores after attackers got hold of API credentials belonging to Ribon, a third-party storefront optimization app used by retailers across the platform. …
Reagiere als Erste:r — dein Feedback zählt!
IR-PLAYBOOK-RCE
HIGHSOC Incident Playbook: Remote Code Execution (RCE) Defense
1-Click Detection Engineering: Sigma & YARA Rules
SOC Readytitle: Detect Exploitation - BigCommerce Merchants Hit in Supply Chain Breach After Ribon App Credentials Were Stolen
id: 0e81373a-c172-4b74-a474-f5f191540f1b
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
- https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-23
logsource:
category: network_connection
product: any
detection:
selection:
CommandLine|contains:
- 'exploit'
condition: selection
falsepositives:
- Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
- attack.initial_accessrule CTI_Threat_Indicator {
meta:
author = "iShareStuff CTI Automated Detection Engine"
date = "2026-09-23"
description = "YARA Signature for "
strings:
$str = "BigCommerce Merchants Hit in S" ascii wide
condition:
any of them
}
SOCIAL SHARE CARD GENERATOR