In recent months, there has been a wave of cyberattacks by the Magecart hackers group. Their aim is to obtain the details of bank cards used to make purchases on eCommerce websites.
Normally, to carry out this type of attack, cybercriminals manipulate Javascript, a programming language that allows you to carry out complex activities on a website, and insert malware, designed to steal confidential data from websites with payment gateways. This harmful software is specifically adapted to the infrastructure of the company concerned. The hackers can thus get access to the banking information of large companies such as Ticketmaster, British Airways and Newegg.
However, researchers from RiskQ and Trend Micro found that this time, instead of attacking eCommerce platforms directly, they targeted a library hosted by an advertising company called Adverline, thus gaining access to payment information from all the websites they used.
Losses of the companies affected Today, there is no real estimate of the losses that these cyberattacks may entail for the companies concerned. However, the following are some of the costs that the company must bear:
- The cost of reissuing customers’ payment cards.
- The interruption of business while the malicious JavaScript is eliminated.
- Possible claims by customers whose personal information has been compromised.
- The likelihood of financial sanctions because of their failure to comply with the new General Data Protection Regulation.
If you want to protect your company against cyberattacks, contact us and we will advise you.
