Casio Caught in Cart Chaos: Web Skimming Scam Hits UK Site!
The Casio UK website fell victim to a sophisticated web skimmer infection, targeting the cart page rather than the usual checkout. This cunning campaign involved a fake payment form, duping users into double-entry skimming. Researchers at Jscrambler identified the attack’s origin as Magento vulnerabilities, highlighting the need for robust web security measures.
Hot Take:
Looks like Casio’s UK website got a dose of Russian roulette, and their checkout page ended up with more twists than a Rubik’s Cube! Instead of just checking out electronics, customers were checking out with a side of cyber espionage. Time to wind up those security policies, Casio, because the clock is ticking on web skimming.
Key Points:
- 17 websites, including Casio UK, were hit by a web skimming campaign.
- Infections likely stemmed from vulnerabilities in Magento e-commerce platforms.
- Skimmer targeted cart pages and used a fake, multi-step payment form.
- Data was encrypted using AES-256-CBC before exfiltration.
- Casio UK’s Content Security Policy was ineffective in preventing the attack.
Already a member? Log in here