Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
A criminal group has infected Magento stores with malicious JavaScript since July 2025, and 953 online shops have been hit so far.
Summary
Most of the victims run Magento, a popular platform for building online stores. The campaign is still active.
This is a brief wire summary, the full story (linked below) has the complete details.
KazaSec's take
Domain and DNS-level issues are an easy blind spot, most organizations monitor their own network far more closely than they monitor how their domain and email authentication records are configured, or whether a lookalike domain has been registered against them.
Coverage details
We've archived 225 other articles touching the same topic (cyber security, cyber security news, threats) , see the full security news archive.
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.