Magento Mayhem: 21 Backdoored Extensions Unleash E-Store Chaos!
Sansec uncovered a supply chain attack via 21 backdoored Magento extensions, leaving 500-1,000 e-stores as vulnerable as a piñata at a birthday party. Even a $40 billion multinational got caught in the mix. Who knew backdoors could be so sneaky and long-lasting? Six years of covert lurking—and now, the party’s just getting started!
Hot Take:
Who knew e-commerce could be so retro? This is like finding out the Trojan Horse wasn’t delivered by the Greeks but left behind by a time-traveling cyber-vandal in 2019. Who’s up for a nostalgia trip through the last six years of your online purchases?
Key Points:
– Sansec uncovered a supply chain attack via 21 backdoored Magento extensions, affecting 500 to 1,000 e-stores.
– The malicious code was injected six years ago but only recently discovered.
– The attack targeted download servers of Tigren, Magesolution, and Meetanshi, allowing threat actors to control e-commerce stores.
– A fake license check in the backdoored extensions facilitated the attack.
– Vendors responded differently to the breach, with some denying it and others confirming hacking incidents.