Skip to content

Instantly share code, notes, and snippets.

@piotrekkaminski
Last active February 5, 2016 20:19
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save piotrekkaminski/db5c8611694b1d5370cc to your computer and use it in GitHub Desktop.
Save piotrekkaminski/db5c8611694b1d5370cc to your computer and use it in GitHub Desktop.
Malware that steal card numbers during checkout, targeting Magento based stores
www.3guysgolfcarts.com - Regexp("onepage|checkout")
www.marisaperry.com - eval(atob(
bocolife.com - regexp('onestepcheckout')
www.vimedis.fr - regexp("checkout")
some others to try
https://accesscards.co.uk
https://www.actiumplus.dk
jewelsberry.com
regexp can be different case and i've seen both " and ' used
eval(atob( [string here is sometimes site specific, i've seen different ones ]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment