Magecart 2020 The New Face of XSS
summary
Research finds attackers inject obfuscated skimmers via writable S3 buckets, compromised open‑source libraries and look‑alike domains, affecting 70% third-party code on pages and persisting for months. A turnkey kit called Inter skimmer is sold and used to create fake checkout flows; a real incident swaps braintree’s script for braintreegateway24.com, completes legitimate payments while exfiltrating card numbers, and pushes stolen data to attacker command‑and‑control servers.
AI-written summary · about
chapters (9)
- 0:00Intro
- 1:02What is Magecart?
- 4:03Evolution of Web Applications
- 9:07Injection Techniques
- 15:04Threat Complexity
- 19:17Case Study - Sixth June
- 21:54Inter Skimmer
- 25:31Attack on Braintree/Paypal
- 28:48Preventing Magecart Attacks
related talks
44mMagecart - The Rising Threat to e-commerce Websites
30mTargeted Web Skimming on E-Commerce Sites
40mHow I Hacked Your Website and You Didn’t Even Know
33mWhere's my dough?! A look at web skimming attacks on
52mFlying Under the Radar - New Security Evasion Techniques
31m360° View of XSS
01h 01mSomething Something Cyber
42mAnatomy of a Crime: Secure DevOps or Darknet Early Breach Detection