Tupperware Hit by Card Skimmer Attack

Malicious code was found hidden inside graphics files on the storage container makers e-commerce website.

Tupperware famously locks in foods freshness, but hackers could not be locked out of the companys e-commerce site. The primary Tupperware site, along with several localized versions, were compromised by digital credit card skimmer disguised inside an image file.
Researchers at Malwarebytes Labs discovered the malicious code when they noticed an anomaly in an iframe container. While the researchers say they dont know what the infection vector was, the malicious campaign is ongoing and, at press time, still active.
The researchers note several details in the malicious code that indicate attackers less polished in their craft than other well-known criminal gangs are involved.
This does indeed sound like the work of a new cybergang that has not scaled operations yet, Mounir Hahad, head of Juniper Threat Labs at Juniper Networks, told Dark Reading. The domain name they chose to register was not customized to blend into their target victims normal website operations, and based on DNS resolution telemetry, it does not seem to have reached any meaningful scale. Nonetheless, this may be the blueprint of future similar attacks on other websites.
Read more
here
.
Check out
The Edge
, Dark Readings new section for features, threat data, and in-depth perspectives. Todays featured story:
What Should I Do If Someone Is Impersonating My Company in a Phishing Campaign?

Last News
▸ Scan suggests Heartbleed patches may not have been successful. ◂ Discovered: 23/12/2024 Category: security	▸ IoT Devices on Average Have 25 Vulnerabilities ◂ Discovered: 23/12/2024 Category: security	▸ DHS-funded SWAMP scans code for bugs. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Tupperware Hit by Card Skimmer Attack