7,500+ Magento sites defaced in global hacking campaign
ID: d2c3780e-4adc-5a02-8117-37b6494c0e45
STIX ID: report--d2c3780e-4adc-5a02-8117-37b6494c0e45
Feed Name: Security Affairs
Threat Score
Since 27 February 2026 a widespread campaign has defaced more than 7,500 Magento domains (over 15,000 hostnames) by placing plaintext defacement files—likely exploiting unauthenticated file upload weaknesses in Magento Community, Enterprise and B2B editions—impacting high-profile brands, government and non-profit sites; activity appears opportunistic and ongoing.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.