Retailers using WooCommerce are the next target for Magecart card skimmer attacks

Three new Magecart attacks are taking advantage of potential vulnerabilities in the WooCommerce ecommerce platform, experts have warned.

Discovered by RiskIQ, the vulnerabilities target retailers using third-party themes and tools to integrate into  WooCommerce pages that are particularly prone to Magecart risk.

As a result, many consumers are potentially vulnerable to having credit card details stolen ahead of the holiday shopping season.

Magecart threat 

Further research by Barn2, a software company that specializes in WooCommerce products and WordPress, found that WooCommerce represents 29% of the top one million websites using ecommerce technologies. This exceeds five million active installs of the free plugin as of early 2021.

WooCommerce is notably popular because it is a free to use and easily customisable WordPress plugin

“WooCommerce users are often small and medium-sized businesses, sometimes considered the most vulnerable, as they lack resources for complex and highly-vetted third-party tools. As we've seen over the years, both small and large retailers can be the targets of Magecart skimming,” RiskIQ wrote in its blog post.

In a typical Magecart attack, threat actors use a vulnerability and weaknesses in an ecommerce platform to inject a malicious code that skims online payment forms to intercept the payment information of unsuspecting customers.

As these third-party tools integrate with thousands of websites, when one supplier is compromised, Magecart has effectively breached thousands of sites at once.

RiskIQ's detection of skimmers and other malware shows the innumerable ways threat actors gain access, deploy, and hide their tools on victim websites and advice site operations to regularly inspect their crontab commands for strange contents, ensure that access permissions are correct, and audit file access to it.

TechRadar – All the latest technology news

Read More

Galaxy Watch price cut at Best Buy: buy a Galaxy Watch Active, get a free $50 gift card

If you're looking for a deal on the Samsung Galaxy Watch Active, then you're in luck. Best Buy's 24-hour flash sale is happening right now and includes a free $ 50 gift card with your purchase of the Galaxy watch.

As the name implies, the Galaxy Watch Active is focused on health and fitness and features an ultra-lightweight design with a one-inch display. The Samsung watch continually monitors your heart and will send alerts when an abnormal heart rate is detected. The watch can even help with sleep and stress, sending you breathing exercises when high-stress levels are detected. The Galaxy Active also helps you keep on track with your fitness goals by tracking up to 39 exercises and displaying your health summary on the smartwatch display.

The Samsung Galaxy Watch Active is rarely discounted, so this is a fantastic opportunity to score a discount on the smartwatch. This offer from Best Buy is only valid for today, so you should take advantage now before it's too late.

See more Galaxy Watch offers with our roundup of the best Samsung Galaxy Watch Active prices and deals.

You can also find out more about the Samsung smartwatch with our Samsung Galaxy Watch Active review.

TechRadar – All the latest technology news

Read More