Last Updated Jun 05, 2020 — Application Security expert
Application Security

On the surface, the breaches that impacted British Airways, Ticketmaster and Forbes seem like any other cyberattack: a bad actor finds a security hole and exploits it. And while the headlines may not appear unique, the fact that Magecart style attacks continue to succeed at breaching the websites of global companies without being detected is costing millions of dollars in fraudulent credit card charges and government penalties.

New research conducted by advisory firm Aite Group revealed that 100% of the eCommerce  websites examined were not protected — making them easy prey for Magecart attacks. Even more startling is the fact that it took only 2.5 hours of research to uncover the 80 compromised sites. Among the other notable findings:

  • All of the compromised websites use an outdated version of Magento which is vulnerable to formjacking and digital card skimming
  • None of the websites used appropriate in-app protection capabilities such as code obfuscation and tamper detection
  • 25% of the sites were large brands in motorsports and luxury retail

Download the full report to learn more about the methods and techniques Magecart groups use to conduct digital card skimming and formjacking, and the security measures you can deploy to protect your website and your customers.

 

Are you ready to scale your enterprise?

Explore

What's New In The World of Digital.ai

September 14, 2023

Mastering Application Hardening: A Deep Dive into Obfuscations

Discover the power of obfuscation in application security. Learn how it enhances protection against attackers and secures software.

Learn More
September 7, 2023

Navigating Apple’s Bitcode Changes: Strengthening App Security with ARM Protection

Explore the shift from Bitcode to ARM Protection in iOS app security—discover more in our blog and stay ahead of evolving threats.

Learn More
August 30, 2023

Guarding the Realm of Play: Digital.ai Application Security’s Decade-Long Legacy

Explore Digital.ai Application Security’s 10-year journey safeguarding gaming realms and balancing fairness and innovation against evolving threats.

Learn More