Security researchers at IBM X-Force IRIS have found evidence of Magecart skimmers targeting commercial layer 7 (L7) routers to steal payment card details of users. Up until now, Magecart-specific code was only delivered at the website level, with web skimmers hiding the code inside PHP or JavaScript files. But researchers say they have found hackers designing and testing malicious scripts that they can inject onto L7 routers – potentially exposing guests connecting to Wi-Fi hotspots to payment data theft.
Full story here: https://www.computing.
co.uk/ctg/news/3081983/ magecart-routers-wifi
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.