Casio’s Checkout Conundrum: Skimmer Skips the Cart!
The Casio UK website was targeted by a peculiar web skimmer that avoided the checkout page, ensuring a uniquely backwards hacking experience. Researchers discovered the skimmer on at least 17 sites, with attackers exploiting Magento vulnerabilities. Casio swiftly removed the malicious code, proving they’re not just about making watches tick.
Hot Take:
Well, it seems the only thing Casio UK couldn’t keep on time was the detection of a web skimmer! They managed to protect the checkout page, but who knew cybercriminals were so interested in browsing watches? Sounds like someone forgot to set their cyber alarm clock!
Key Points:
- Web skimmer infects Casio UK website, excluding the checkout page.
- 17 websites compromised, vulnerability likely in Magento e-stores.
- Initial skimmer loader was unobfuscated, unlike usual methods.
- Data encrypted with AES-256-CBC before exfiltration.
- Casio UK’s Content Security Policy in report-only mode, not blocking attacks.
Already a member? Log in here