Menu
Sign In
shutterstock_490960141-1

Industry News: ESG5

    Know Your Breach: Magecart Group

    Jul 26, 2019 10:28:37 AM

    The target: Over 17,000 websites using Amazon’s S3 public cloud storage.

    The take: Credit Card payment information and personal data.

    The attack vector: MageCart Group perpetrated the hacking campaign which methodically scanned and identified 17,000 unique, misconfigured Cloud Storage buckets. After locating an unsecured cloud storage server, they focused on JavaScript files which they then downloaded, added their card skimming script, and then reuploaded the now infected files.

    Read more...

    Topics:Know Your Breach

    About Castle Hall Diligence

    Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios More →

    Subscribe to Cyber Updates