Source: thehackernews.com
An unknown threat actor has compromised 953 online stores, predominantly running Magento, as part of a campaign active since July 2025. The attackers inject a small piece of malicious code into store pages that serves JavaScript loader code via Magento CMS blocks when visited by users. The campaign was uncovered by Dutch e-commerce security firm Sansec. The malicious JavaScript is designed to evade common scanners, making detection difficult. The attack targets Magento-based e-commerce platforms, putting customer payment data and personal information at risk. The scale and duration of the campaign suggest a sophisticated and organized threat actor.
