Dozens of Credit Card Info Skimming Scripts Infect Thousands of Sites

[LASER_oneXM]

Content source

https://www.bleepingcomputer.com/news/security/dozens-of-credit-card-info-skimming-scripts-infect-thousands-of-sites/

Malicious web code that Magecart groups use to steal payment card data from online stores is bustling business on underground forums. There are at least 38 unique families of such scripts, some more advanced than others, but each with multiple custom variants under their belt.

Coined by researchers at RiskIQ, the name Magecart refers to groups that scrape card data via malicious JavaScript code that loads on checkout pages. In late February, the company had discovered 12 distinct Magecart groups.
... ...

 

[Sunshine-boy]

kudos to these hackers.

 

[oldschool]

Credit card usage is mostly unavoidable but may be limited to avoid some of the perils of web shopping. I use cash as often as possible locally. "Cash, still accepted at most locations!" Very old school.

 

[shmu26]

Anyone have a few wise words on how to make an online purchase and minimize risks? You can't just disable javascript because checkout won't work. You don't want to allow all scripts because then you are at risk. So how do you do it? How can you tell which scripts are legit? For instance, let's say I want to buy a gift card on Amazon. I see a whole bunch of scripts, and some of them are 3rd party:

Or, let's say I want to donate to my favorite charity: