logo

Cyber Monday: Online Shopping and increasing

ID: 446e077d-5708-5415-b88d-82ab2034ed2d

STIX ID: report--446e077d-5708-5415-b88d-82ab2034ed2d

Feed Name: Zscaler Security Research Blog

Threat Score
70/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

Zscaler ThreatLabz observed a surge in Magecart card-skimming and Black Friday/Cyber Monday phishing campaigns: multiple Magento and e-commerce sites were found serving obfuscated skimmer scripts (appended to JS files or injected as iframes) that exfiltrate payment card data to attacker-controlled domains and IPs (examples: 103.139.113.34, googleplus.name, giantnicrobes.com). The report provides infection examples, domain/IP IOCs, evidence of active data theft across multiple stores, and practical mitigation recommendations for shoppers and site administrators.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.