Hackers have compromised 953 online stores, mostly running Magento, in a campaign that hides malicious JavaScript inside website content. The latest loader can run previously stored code even after its delivery domain is blocked or goes offline. The campaign has operated since July 2025. Its newest domain, deepveindrilling.com, appeared in the... Weiterlesen: Hackers Plant Malicious Scripts in Magento Stores That Keep Running E…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Plant Malicious Scripts in Magento Stores That Keep Running Even After Domain Blocks
Hackers have compromised 953 online stores, mostly running Magento, in a campaign that hides malicious JavaScript inside website content. The latest loader can…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
13 Quellen
AI Makes Linux 7.4 Merge Window the Largest in Kernel History
12 weitere Quellen
SSlashdotvor 1 Std.AI Makes Linux 7.4 Merge Window the Largest in Kernel History VVulDB Updatesvor 4 Std.CVE-2026-72383 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc1 sctp sctp_free_addr_wq use after free VVulDB Updatesvor 4 Std.CVE-2026-72375 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc1 afs lib/debugobjects.c afs_lock_work race condition VVulDB Updatesvor 4 Std.CVE-2026-72329 | Linux Kernel up to 7.1.4/7.2-rc2 liquidio liquidio_vf.c pcie_flr null pointer dereference VVulDB Updatesvor 4 Std.CVE-2026-72320 | Linux Kernel up to 6.12.96/6.18.39/7.1.4/7.2-rc2 nft_lookup nft_lookup_eval privileges management VVulDB Updatesvor 4 Std.CVE-2026-72395 | Linux Kernel up to 7.2-rc1 Hwmon Pmbus regulator_handle_critical event state issue
+6
11 Quellen
CVE-2026-106207 | Google Chrome up to 154.0.8037.97 V8 race condition (WID-SEC-2026-3761)
10 weitere Quellen
VVulDB Updatesvor 6 Std.CVE-2026-106209 | Google Chrome up to 154.0.8037.97 Mobile clickjacking (WID-SEC-2026-3761) VVulDB Updatesvor 6 Std.CVE-2026-106210 | Google Chrome up to 154.0.8037.97 Scroll information disclosure (WID-SEC-2026-3761) VVulDB Updatesvor 6 Std.CVE-2026-106213 | Google Chrome up to 154.0.8037.97 WebAudio race condition (WID-SEC-2026-3761) VVulDB Updatesvor 6 Std.CVE-2026-106211 | Google Chrome up to 154.0.8037.97 TabStrip use after free (WID-SEC-2026-3761) VVulDB Updatesvor 6 Std.CVE-2026-106214 | Google Chrome up to 154.0.8037.97 Proxy information disclosure (WID-SEC-2026-3761) VVulDB Updatesvor 6 Std.CVE-2026-106215 | Google Chrome up to 154.0.8037.97 ANGLE uninitialized resource (WID-SEC-2026-3761)
+4
9 Quellen
CVE-2026-109715 | Mozilla Firefox up to 115.42/153.4/157 JavaScript Engine integer overflow (Nessus ID 374794)
8 weitere Quellen
VVulDB Updatesvor 1 Std.CVE-2026-109740 | Mozilla Firefox up to 153.4/157 Win32 sandbox (Nessus ID 374794) VVulDB Updatesvor 1 Std.CVE-2026-109706 | Mozilla Firefox up to 115.42/153.4/157 IndexedDB use after free (Nessus ID 374794) VVulDB Updatesvor 1 Std.CVE-2026-109724 | Mozilla Firefox up to 153.4/157 DOM/HTML use after free (Nessus ID 374794) VVulDB Updatesvor 1 Std.CVE-2026-109713 | Mozilla Firefox up to 153.4/157 Crash Reporting use after free (Nessus ID 374794) VVulDB Updatesvor 1 Std.CVE-2026-109745 | Mozilla Firefox up to 153.4/157 Web Serial uninitialized pointer (Nessus ID 374794) VVulDB Updatesvor 1 Std.CVE-2026-109709 | Mozilla Firefox up to 153.4/157 Process Sandboxing privileges management (Nessus ID 374794)
+2
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4300246/sichere-programmierung/hackers-plant-malicious-scripts-in-magento-stores-that-keep-running-even-after-domain-blocks/