Vulnerability Bulletins

Fake Google Domains Used in Evasive Magento Skimmer

   
Affected software Wordpress
 
http://feedproxy.google.com/~r/sucuri/blog/~3/eu9Vp7Ox1yQ/fake-google-domains-used-in-evasive-magento-skimmer.html We were recently contacted by a Magento website owner who had been blacklisted and was experiencing McAfee SiteAdvisor “Dangerous Site” warnings. Our investigation revealed that the site had been infected with a credit card skimmer loading JavaScript from the malicious internationalized domain google-analytîcs[.]com (or xn--google-analytcs-xpb[.]com in ASCII):

More info:

http://feedproxy.google.com/~r/sucuri/blog/~3/eu9Vp7Ox1yQ/fake-google-domains-used-in-evasive-magento-skimmer.html