A new Magecart network has been uncovered, targeting major payment networks including American Express, Diners Club, Discover, and Mastercard. The campaign, active since January 2022, uses web-skimming techniques to steal credit card information from online shoppers. The attackers inject malicious JavaScript code into compromised e-commerce websites, creating fake payment forms that capture and exfiltrate sensitive data. The skimmer employs sophisticated obfuscation techniques and mimics legitimate payment processes to avoid detection. Victims are unaware of the theft, as the malware allows the real transaction to proceed after capturing the data. The campaign demonstrates advanced knowledge of e-commerce platforms and continues to pose a significant threat to online retailers and consumers worldwide.
AI tools are enabling cybercriminals to create sophisticated Black Friday scams, including realistic phishing emails, cloned websites, and fake social media ads. Common tactics involve impersonating trusted brands like Amazon and Temu, offering unrealistic discounts on luxury goods, and exploiting shoppers' urgency. AI-enhanced scams are harder to detect, blending seamlessly with legitimate retail behavior. Key warning signs include suspicious sender addresses, unusual URLs, missing website information, and pressure tactics. To stay safe, shoppers should verify sender domains, inspect links, question dramatic discounts, use secure payment methods, and shop directly on official websites. Awareness and caution are crucial defenses against these evolving AI-powered threats during the holiday shopping season.
