Online gun shops in the US hacked to steal credit cards

[Gandalf_The_Grey]

Content source

https://www.bleepingcomputer.com/news/security/online-gun-shops-in-the-us-hacked-to-steal-credit-cards/

Two two American gun shops, Rainier Arms and Numrich Gun Parts, that operate e-commerce sites have disclosed data breaches resulting from card skimmer infections on their sites.

Credit card skimmers are malicious JavaScript code either embedded on the sites or fetched from a remote resource by a seemingly innocuous element, such as a favicon. Their purpose is to steal payment information entered on order checkout pages.

The operators of these skimmers can steal credit card numbers, expiration dates, CVV codes, customer names, phone numbers, and addresses, which is all they need to perform unauthorized online purchases.

Having your credit or debit card details stolen is a direct threat to your financial integrity as threat actors are enabled to perform unauthorized purchases with your balance, but in this case, that’s not the whole story.

Gun ownership is a sensitive topic in itself, so identifying large firearms purchases could put customers in the crosshairs of criminals who are on the lookout for valuable stashes.

Especially in the case of Rainier Arms, which sells high-end tactical rifles, the scenario can become even more tempting for criminals.