An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by unsuspecting users, serves malicious JavaScript loader code through Magento CMS blocks. "When you
Journalistic Attribution: Reported via The Hacker News for public informational purposes under Fair Use. Read the original primary report →
Copyright of original reporting belongs to The Hacker News. Contact support@cubiqinfotech.com for DMCA inquiries.
