The government's cybersecurity agency Cert-In has warned against incidents of credit card skimming on e-commerce websites worldwide. In online credit card skimming, cyber criminals add skimming code on online shopping websites to steal credit card information shared by customers. As per Cert-In, "Attackers are typically targeting e-commerce sites because of their wide presence, popularity and the environment LAMP (Linux, Apache, MySQL, and PHP)."
The Cert-In's advisory is based on Malwarebytes recent report. According to the report, all the compromised sites identified had a shopping portal, and this is exactly what the attackers were after. Cert-In has also shared the names of skimmer hosting sites as well as best practices to follow for website developers:
No comments:
Post a Comment