Discord Server Red Security Twitter Donation to Red Security Red Security Youtube Channel Red Security Tumblr Profile
Login or Register to Hide ads and Accessing all features on the forum

News 

It took hackers just 22 lines of code to steal British Airways’ customer data

0 Replies, 1778 Views

In The Name OF Allah
Al-Salam Alekum

[Image: lousy_hacker-796x430.jpg]

Quote:Last week, British Airways acknowledged that its website had been hacked – leading to 380,000 customers‘ data being compromised. It seems like it wasn’t too difficult either: Cybersecurity firm RiskIQ has found out that it took hackers just 22 lines of code to get a hold of the data. RiskIQ speculated that a group called Magecart is behind this attack; it was responsible for the TicketMaster UK hack earlier this year, which affected the data of 400,000 customers. Magecart has traditionally stolen data by injecting a malicious script into payment forms.

The hackers modified a Modernizr javascript version 2.6.2 ( a library used to detect certain user actions like clicks and taps) – on BA’s site to steal the data between August 21 and September 5. RiskIQ found that the script had been modified on August 21 just before the data breach began. The modified code – where just 22 lines were changed – sent the information to the hackers’ servers as soon as someone hit the ‘Submit’ button on the payments form. The script was able to capture BA customers’ names, addresses, phone numbers and details through its site and mobile app.
https://thenextweb.com/security/2018/09/...ata/?amp=1

Wa Salam Alekum
Rs
* Thankful to Allah *
Kurdy

Possibly Related Threads…
Thread Author Replies Views Last Post
Star News Good Heavens! 10M Impacted in Pray.com Data Exposure News 0 5,252 11-21-2020, 04:21 AM
Last Post: News
Star News Iowa Hospital Alerts 60K Individuals Affected by June Data Breach News 0 1,885 11-20-2020, 02:36 AM
Last Post: News
Star News Data of 27 Million Texas Drivers Compromised in Breach News 0 1,749 11-15-2020, 11:41 AM
Last Post: News
Star News WordPress Sites Open to Code Injection Attacks via Welcart e-Commerce Bug News 0 1,700 11-07-2020, 04:13 PM
Last Post: News
Star News Top tip, everyone: Chinese hackers are hitting these 25 vulns, so make sure you patc News 0 1,801 10-21-2020, 11:27 AM
Last Post: News
Star News US Warns: Hackers Chaining Zerologon, Other Vulnerabilities News 0 1,849 10-11-2020, 01:15 PM
Last Post: News
Star News Joplin 1.0.245 Cross Site Scripting / Code Execution ≈ Packet Storm News 0 1,409 09-29-2020, 07:43 AM
Last Post: News
Star News Microsoft Exchange Server DlpUtils AddTenantDlpPolicy Remote Code Execution - CXSecu News 0 1,473 09-18-2020, 08:12 AM
Last Post: News
Star News Data Breaches Exposes Vets, COVID-19 Patients News 0 1,513 09-16-2020, 02:03 AM
Last Post: News
Star News ManageEngine Applications Manager Authenticated Remote Code Execution - CXSecurity.c News 0 1,333 09-06-2020, 01:51 PM
Last Post: News



Users browsing this thread: 1 Guest(s)