Hackers have compromised 953 online stores, mostly running Magento, in a campaign that hides malicious JavaScript inside website content. The latest loader can run previously stored code even after its delivery domain is blocked or goes offline. The campaign has operated since July 2025. Its newest domain, deepveindrilling.com, appeared in the... Weiterlesen: Hackers Plant Malicious Scripts in Magento Stores That Keep Running E…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Plant Malicious Scripts in Magento Stores That Keep Running Even After Domain Blocks
Hackers have compromised 953 online stores, mostly running Magento, in a campaign that hides malicious JavaScript inside website content. The latest loader can…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
17 sources
CVE-2026-68445 | Linux Kernel up to 7.2-rc4 vc4 vc4_gem_object_mmap privileges management (Nessus ID 334892 / WID-SEC-2026-2799)
16 more sources
VVulDB Updates1 hour agoCVE-2026-68453 | Linux Kernel up to 6.18.43/7.1.7/7.2-rc5 zcrypt cca_cipher2protkey buffer overflow VVulDB Updates1 hour agoCVE-2026-72200 | Linux Kernel ntfs integer overflow (EUVD-2026-58958) VVulDB Updates1 hour agoCVE-2026-68471 | Linux Kernel up to 6.18.39/7.1.4/7.2-rc3 Wifi Ieee80211 Mle ieee80211_mle_size_ok input validation (WID-SEC-2026-2852) VVulDB Updates1 hour agoCVE-2026-72203 | Linux Kernel up to 7.1.4 NTFS attrib.c ntfs_mft_writepages deadlock (EUVD-2026-58961) VVulDB Updates1 hour agoCVE-2026-72198 | Linux Kernel up to 7.1.4 ntfs dir.c ntfs_inode_sync_standard_information non_resident improper synchronization (EUVD-2026-58956) VVulDB Updates1 hour agoCVE-2026-72130 | Linux Kernel up to 6.12.100/6.18.39/7.1.4 nvmet-auth nvmet_execute_auth_receive out-of-bounds write (Nessus ID 342234)
+10
10 sources
CVE-2026-62902 | Microsoft .NET/Visual Studio improper authorization (EUVD-2026-56410 / WID-SEC-2026-2761)
9 more sources
VVulDB Updates1 hour agoCVE-2026-62899 | Microsoft .NET/Visual Studio improper authorization (Nessus ID 335252 / WID-SEC-2026-2761) VVulDB Updates1 hour agoCVE-2026-73608 | Siyuan Note SiYuan up to 3.7.3 getAttributeViewSearchTarget improper authorization VVulDB Updates1 hour agoCVE-2026-70354 | Microsoft .NET/Visual Studio out-of-bounds write (EUVD-2026-56770 / Nessus ID 341336) VVulDB Updates1 hour agoCVE-2026-62909 | Microsoft .NET/Visual Studio privileges management (EUVD-2026-56412 / Nessus ID 335447) VVulDB Updates1 hour agoCVE-2026-62901 | Microsoft .NET/Visual Studio infinite loop (EUVD-2026-56409 / Nessus ID 335447) VVulDB Updates5 hours agoCVE-2026-62897 | Microsoft .NET/.NET Framework/Visual Studio integer overflow (WID-SEC-2026-2761)
+3
10 sources
FBI: Nordkorea steckt hinter Milliarden-Kryptodiebstahl bei Binance
9 more sources
Hheise online News3 hours agoFBI: Nordkorea steckt hinter Milliarden-Kryptodiebstahl bei Binance GGoogle Alert3 hours agoBinance: Kryptobörse nimmt nach Milliarden-Raub Auszahlungen wieder auf GGoogle Alert2 hours agoBinance nach Rekord-Diebstahl: Hacker erbeuten 6,3 Milliarden Dollar – was jetzt passiert GGoogle Alert13 hours agoHacker erbeuteten 6,3 Milliarden Dollar von der Kryptowährungsbörse Binance: GGoogle Alert9 hours agoFBI vermutet nordkoreanische Hacker hinter Angriff auf "Binance" | BR24 GGoogle Alert8 hours agoFBI bestätigt: Nordkorea steckt hinter milliardenschwerem Krypto-Diebstahl bei Binance
+3
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4300246/secure-programming/hackers-plant-malicious-scripts-in-magento-stores-that-keep-running-even-after-domain-blocks/