Discord Server Red Security Twitter Donation to Red Security Red Security Youtube Channel Red Security Tumblr Profile
Windscribe
Login or Register to Hide ads and Accessing all features on the forum
Thread Rating:
  • 3 Vote(s) - 1 Average
  • 1
  • 2
  • 3
  • 4
  • 5
News It took hackers just 22 lines of code to steal British Airways’ customer data
#1
In The Name OF Allah
Al-Salam Alekum

[Image: lousy_hacker-796x430.jpg]

Quote:Last week, British Airways acknowledged that its website had been hacked – leading to 380,000 customers‘ data being compromised. It seems like it wasn’t too difficult either: Cybersecurity firm RiskIQ has found out that it took hackers just 22 lines of code to get a hold of the data. RiskIQ speculated that a group called Magecart is behind this attack; it was responsible for the TicketMaster UK hack earlier this year, which affected the data of 400,000 customers. Magecart has traditionally stolen data by injecting a malicious script into payment forms.

The hackers modified a Modernizr javascript version 2.6.2 ( a library used to detect certain user actions like clicks and taps) – on BA’s site to steal the data between August 21 and September 5. RiskIQ found that the script had been modified on August 21 just before the data breach began. The modified code – where just 22 lines were changed – sent the information to the hackers’ servers as soon as someone hit the ‘Submit’ button on the payments form. The script was able to capture BA customers’ names, addresses, phone numbers and details through its site and mobile app.
https://thenextweb.com/security/2018/09/...ata/?amp=1

Wa Salam Alekum
Rs
* Thankful to Allah *
Kurdy
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
Star News Good Heavens! 10M Impacted in Pray.com Data Exposure News 0 3,204 11-21-2020, 04:21 AM
Last Post: News
Star News Iowa Hospital Alerts 60K Individuals Affected by June Data Breach News 0 594 11-20-2020, 02:36 AM
Last Post: News
Star News Data of 27 Million Texas Drivers Compromised in Breach News 0 436 11-15-2020, 11:41 AM
Last Post: News
Star News WordPress Sites Open to Code Injection Attacks via Welcart e-Commerce Bug News 0 436 11-07-2020, 04:13 PM
Last Post: News
Star News Top tip, everyone: Chinese hackers are hitting these 25 vulns, so make sure you patc News 0 457 10-21-2020, 11:27 AM
Last Post: News
Star News US Warns: Hackers Chaining Zerologon, Other Vulnerabilities News 0 443 10-11-2020, 01:15 PM
Last Post: News
Star News Joplin 1.0.245 Cross Site Scripting / Code Execution ≈ Packet Storm News 0 356 09-29-2020, 07:43 AM
Last Post: News
Star News Microsoft Exchange Server DlpUtils AddTenantDlpPolicy Remote Code Execution - CXSecu News 0 457 09-18-2020, 08:12 AM
Last Post: News
Star News Data Breaches Exposes Vets, COVID-19 Patients News 0 452 09-16-2020, 02:03 AM
Last Post: News
Star News ManageEngine Applications Manager Authenticated Remote Code Execution - CXSecurity.c News 0 411 09-06-2020, 01:51 PM
Last Post: News



Users browsing this thread: 1 Guest(s)