216.73.216.6

New Magecart Network Uncovered: Disrupting Online Shoppers Worldwide

· Published 13/01/2026 19:36 · Modified 14/01/2026 11:12

Export JSON

Essential information

Published
13/01/2026 19:36
Modified
14/01/2026 11:12
Tags
2026-01-13 credit card theft e-commerce javascript injection payment fraud web skimming
Related entities
2 observables, 1 intrusion sets (apt), 10 techniques (mitre), 4 others

Description

A new Magecart network has been uncovered, targeting major payment networks including American Express, Diners Club, Discover, and Mastercard. The campaign, active since January 2022, uses web-skimming techniques to steal credit card information from online shoppers. The attackers inject malicious JavaScript code into compromised websites, creating fake payment forms that capture and exfiltrate sensitive data. The skimmer employs sophisticated obfuscation techniques and mimics legitimate payment processes to avoid detection. Victims are unaware of the theft, as the malware allows the real transaction to proceed after capturing the data. The campaign demonstrates advanced knowledge of platforms and continues to pose a significant threat to online retailers and consumers worldwide.

External references