News Coverage

People’s privacy and data security face risk of attacks from cyber-criminals who tap unsecured official Coronavirus Android apps

The UK’s domain name registry Nominet, which manages the launch of .uk websites, is stepping up efforts to tackle the proliferation of sites dedicated to scamming the public, for example by selling fake vaccines, protective equipment and frauds remedies to the COVID-19 virus.

Cybersecurity researchers from threat intelligence firm RiskIQ uncovered a new Magecart campaign dubbed as “Magecart Group 7” that compromised over 19 e-commerce websites to steal customers’ payment card data. According to RiskIQ’s report, the researchers discovered a software skimmer “MakeFrame,” which injects HTML iframes into the targeted websites to obtain payment information.

A Magecart threat actor tracked as “Group 7” has been using a skimmer that creates iframes to steal payment card data, RiskIQ reveals.

Online credit card skimmers have stepped up their activity now that everyone’s shopping from home, according to data from security company RiskIQ. The most notable of these groups is Magecart, which recently laid siege to blender vendor Nutribullet.

Steve Ginty, Director of Threat Intelligence at RiskIQ, interview

Security outfit RiskIQ says it has found a new variant of the cyber-crime syndicate Magecart which is has named MakeFrame due to the fact that it creates iframes for skimming payment data from websites.

MakeFrame, named for its ability to make iframes for skimming payment data, is attributed to Magecart Group 7.

One of the more infamous cases of digital credit card skimming happened in 2018, when the data from 380,000 cards was stolen from the British Airways site. This was attributed to Magecart, an umbrella term that covers numerous distinct cybercriminal groups, according to RiskIQ.