magecart
Magecart is a malware framework intended to steal credit card information from compromised eCommerce websites. Used in criminal activities, it's a sophisticated implant built on top of relays, command and controls and anonymizers used to steal eCommerce customers' credit card information. The first stage is typically implemented in Javascript included into a compromised checkout page. It copies data from "input fields" and send them to a relay which collects credit cards coming from a subset of compromised eCommerces and forwards them to Command and Control servers.
Linked Threat Actors
C2 Infrastructure
Last 7 days
| Date | C2 Hosts |
|---|---|
| Apr 5, 2026 | 5 |
Further Reading
Discover Microsoft Defender Threat Intelligence—powerful threat intelligence software for cyber threat protection and threat solutions for your organization.
Discover Microsoft Defender Threat Intelligence—powerful threat intelligence software for cyber threat protection and threat solutions for your organization.
Discover Microsoft Defender Threat Intelligence—powerful threat intelligence software for cyber threat protection and threat solutions for your organization.
The malicious code has now been removed from all stores, but users are advised to review card statements for suspicious transactions.
Increasing credit card skimming activity against Magento and Presta-based e-commerce stores as Black Friday holiday season approaches.