50k credit cards stolen from 300 U.S. restaurants using skimmers

[Gandalf_The_Grey]

Content source

https://www.bleepingcomputer.com/news/security/50k-credit-cards-stolen-from-300-us-restaurants-using-skimmers/

Payment card details from customers of more than 300 restaurants have been stolen in two web-skimming campaigns targeting three online ordering platforms.

Web-skimmers, or Magecart malware, are typically JavaScript code that collects credit card data when online shoppers type it on the checkout page.

Recently, Recorded Future’s threat detection tools identified two Magecart campaigns injecting malicious code into the online ordering portals of MenuDrive, Harbortouch, and InTouchPOS.

As a result, 50,000 payment cards were stolen and have already been offered for sale on various marketplaces on the dark web.

According to Recorded Future, both campaigns are ongoing, and their corresponding exfiltration domains are still online and operational.

The security firm has alerted all impacted entities of the compromise, but they have not received a response yet. Law enforcement agencies and payment platforms have been informed accordingly.

In the case of MenuDrive and Harbortouch, removing the skimmers requires scanning all restaurant subdomains.

The InTouchPOS infection is easier to catch with most security scanners, as it uses a JavaScript downloader for the skimmer, which can be detected through simple code comparison.

BleepingComputer has contacted all three platforms for a comment on these attacks and is currently waiting for a reply.

50k credit cards stolen from 300 U.S. restaurants using skimmers

Payment card details from customers of more than 300 restaurants have been stolen in two web-skimming campaigns targeting three online ordering platforms.

www.bleepingcomputer.com

 

[oldschool]

Cash! Still accepted at most locations.

 

[Gandalf_The_Grey]

Cash! Still accepted at most locations.

That's oldschool

 

[show-Zi]

That's oldschool

Cash payments are still common in Japan!