Hackers breach Volusion and start collecting card details from thousands of sites

[InfoSec News <alerts () infosecnews org>]

https://www.zdnet.com/article/hackers-breach-volusion-and-start-collecting-card-details-from-thousands-of-sites/

By Catalin Cimpanu
Zero Day
ZDNet October 8, 2019

Hackers have breached the infrastructure of Volusion, a provider of 
cloud-hosted online stores, and are delivering malicious code that records and 
steals payment card details entered by users in online forms.

More than 6,500 stores are impacted, but the number could be even higher. In a 
press release published last month, Volusion claimed it had more than 20,000 
customers.

The most notable compromise is the Sesame Street Live online store, which has 
been taken down earlier today after another journalist reached out.

At the time of writing, the malicious code is still on Volusion's servers and 
is still being delivered to all of the company's client stores.

[...]


--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_