Recently, Europol notified over 400 online merchants that their online shops were infected with scripts aimed at stealing payment information from customers making purchases. This operation to identify infected e-commerce sites also resulted in the identification of 12 new digital skimmers.
Pedro Fortuna, CTO and Co-Founder at Jscrambler had this to say:
“Digital skimming attacks can often result from a company’s use of tag management systems to add functionality and heighten the user experience by going around established change control processes. Many would think of these third-party tags as the culprit, with the answer being their removal. However, this is not a realistic way for security to approach this challenge as it threatens business continuity. Organizations must distinguish themselves by finding a balance of protection and operation, which means deploying the right client-side protections that can control third-party JavaScript based on behavior. That way, security does not have to impede the growth and success of a business.”
This is really scary given the amount of purchases made online. Vendors need to make sure that the payment infrastructure that they use is 100% safe 100% of the time.
Related
This entry was posted on January 2, 2024 at 3:47 pm and is filed under Commentary with tags Hacked. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Europol Notified 400+ Online Merchants Of Skimmer Infections
Recently, Europol notified over 400 online merchants that their online shops were infected with scripts aimed at stealing payment information from customers making purchases. This operation to identify infected e-commerce sites also resulted in the identification of 12 new digital skimmers.
Pedro Fortuna, CTO and Co-Founder at Jscrambler had this to say:
“Digital skimming attacks can often result from a company’s use of tag management systems to add functionality and heighten the user experience by going around established change control processes. Many would think of these third-party tags as the culprit, with the answer being their removal. However, this is not a realistic way for security to approach this challenge as it threatens business continuity. Organizations must distinguish themselves by finding a balance of protection and operation, which means deploying the right client-side protections that can control third-party JavaScript based on behavior. That way, security does not have to impede the growth and success of a business.”
This is really scary given the amount of purchases made online. Vendors need to make sure that the payment infrastructure that they use is 100% safe 100% of the time.
Share this:
Like this:
Related
This entry was posted on January 2, 2024 at 3:47 pm and is filed under Commentary with tags Hacked. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.