For more than a month, this group of hackers have siphoned the bank cards numbers on Newegg, an e-commerce site which receives more than 50 million visitors a month.
Specialized in the theft of credit card data, Magecart’s hackers keep their momentum. After Ticketmaster last June, British Airways and Feedify last week, it's the turn of Newegg, American specialist in the online sale of computer equipment to fall in the nets of these cyber-criminals.
The modus operandi is similar to the one which affected the British company. The Magecart group managed to hack the Newegg’s servers and to place a malicious code directly on the payment page.
At the moment the buyer confirms his banking data, these are automatically transferred towards a controlled server by the hackers: card number, validity date and three-digit security code.
According to RiskIQ’s analysis, IT security specialist, this hostile code was injected around August 14th. The hackers were thus able to siphon banking data during more than a month. It’s not nothing because Newegg is not a small player. This company generated $ 2,65 billion in 2016 and receives more than 50 million visitors a month.
RiskIQ therefore considers that the number of victims is "massive". Probably on the order of several millions, even tens millions…
Several ways to protect yourself
This attack proves that e-commerce sites are not enough secured. As user, there are several ways to protect yourself, starting with the activation of the 3D Secure protection.
In this case, the transactions must be validated by one single-use code sent by SMS. Unfortunately, not all e-commerce sites integrate this system.
Other solution: use a virtual bank card. This system allows to generate single-use card number for each online purchase.
" It is an effective method to counter the fraud after attacks. That’s our main recommendation ", explains Yonathan Klijnsman, security researcher at RiskIQ.
Finally, if you make purchases on a site that has registered your bank card in its databases, you have nothing to be afraid of because the card numbers are no longer filled in forms.
It’s the case if you make 1-Click shopping on Amazon or on Apple iTunes for example.
If you have questions and if you need advice, just let me know!
I've made a lot of articles with tools, explanations and advises to show you how to protect your privacy and to secure your computer, GO check them out!
This is my guide to secure your PC after a fresh installation of Windows
If you think that your phone or your PC has been hacked, you have to check it right now!
That's how you can be more Anonymous on the internet!
Your PC is slow? That's why!
You Feel hot? Your computer also!
How an adware works?
That's how you should guard against Trojan!
What are the different types of hackers?
