Cybersecurity Insights

Over the past couple of days a large number of Magento 1 websites (and smaller numbers of Magento 2, OpenMage, ASP.net and PHP sites) have been observed as being infected with a previously unknown card data skimmer. This has been one of the largest campaigns in recent times, we have identified more than 4,400 infected websites (and counting). The malware uses a key logging approach to extract card data from the websites’ checkout pages and sends that data back to an infrastructure under the control of the attacker.

A common piece of advice that floats around online is to never shop on sites without an SSL (Secure Sockets Layer) certification or, more commonly, sites that ‘don’t have the little padlock in the URL’. This is for good reason for, without them, customer data could be stolen within minutes by even the most unskilled of hackers.

Recently, Foregenix worked with Amazon Web Services to do a security review of the GuardDuty Intelligent Threat Detection Service. Specifically, we were looking for three abilities in the service:

PCI, PFI, PCI DSS, PCI SSC, these are all terms you will hear and need to know about when operating within the Payment Card Industry. We understand that it’s a lot to read into, which is why we’ve compiled a simple run-through of all the basics you’ll need to know.

Foregenix is proud to partner with ITQ Digital, with the goal of keeping their clients secure on an internet ever-growing with cyberthreats.