Dismiss this notice
WinRAR forever! Father's Day 2019 Giveaway - [Only registered and activated users can see links Click here to register]

Dismiss this notice
Avast Premier Photo Caption - [Only registered and activated users can see links Click here to register]

Dismiss this notice
FastestVPN Accounts Giveaway - [Only registered and activated users can see links Click here to register]


Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Magecart Hackers Scan for Misconfigured S3 Buckets
#1
Quote:Magecart hackers have compromised thousands of websites with digital skimming code by scanning for misconfigured Amazon S3 buckets, researchers have warned.
 
First discovered in May, the campaign is far more extensive that originally thought thanks to the automated scanning and exploitation of unsecured cloud storage accounts, explained [Only registered and activated users can see links Click here to register]Yonathan Klijnsma.

“These actors automatically scan for buckets which are misconfigured to allow anyone to view and edit the files it contains. Once the attackers find a misconfigured bucket, they scan it for any JavaScript file (ending in .js),” he explained. “They then download these JavaScript files, append their skimming code to the bottom, and overwrite the script on the bucket. This technique is possible because of the misconfigured permissions on the S3 bucket, which grants the write permission to anyone.”
 
The attacks, which started in April, have managed to compromise a “vast collection of S3 buckets” related to over 17,000 domains, including some of the top 2000 Alexa-ranked websites in the world, Klijnsma said.
However, given the “spray-and-pay” nature of these attacks, the skimming code will not always load on a payment page.

SOURCE: [Only registered and activated users can see links Click here to register]
[-] The following 2 users Like silversurfer's post:
  • harlan4096, ismail
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Recent Posts
GoodSync 10 [PC & Mac]
Thanks I got one mys...damien76 — 23:15
GFYI [Official] Avast Premier MakeUSLau...
Thanks for contest! ...damien76 — 23:13
GFYI [Official] FastestVPN Accounts Giv...
"WHY do you wan...damien76 — 23:07
GFYI [Official] My Dad forever! My WinR...
GIVEAWAY / CONTEST H...jasonX — 20:00
[FreeToPlay]Outpost Zero-Steam
Outpost Zero blen...ismail — 19:33

[-]
Birthdays
Today's Birthdays
avatar (34)papedDow
avatar (43)ArnoldFum
avatar (31)yfaza
Upcoming Birthdays
avatar (36)lapedDow
avatar (42)rituabew
avatar (30)omyjul
avatar (32)boineDon
avatar (34)vkseogaF
avatar (30)usogy
avatar (33)ywixazok

[-]
Online Staff
There are no staff members currently online.

>