Cybersecurity Alert: Web-Skimming Campaign Exploits Legacy API to Swipe Credit Card Data from Online Retailers

Cybersecurity researchers at Jscrambler have discovered a crafty web-skimming campaign using a deprecated Stripe API to validate and swipe active credit card details from online retailers. The attackers cleverly disguise malicious JavaScript as legitimate payment forms, making it a real-life game of hide and seek with your wallet!

3P
Published: April 3, 2025 3:48 pmAdded: April 3, 2025 at 9:00 amAssembled by: The Editor
Pro Dashboard

Key Points:

  • Cybercriminals are using a legacy API to validate stolen credit card data in real time.
  • Malicious JavaScript mimics legitimate payment forms to capture customer information.
  • Attackers have been targeting online retailers using popular platforms like WooCommerce and WordPress.
  • Jscrambler identified 49 affected merchants, but this number might be underestimated.
  • Researchers advise merchants to implement real-time monitoring solutions to thwart such attacks.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
powered by the NSA, er,  GDPR Cookie Compliance
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?