SPIN Unprocessed October 26, 2026 ai_technology cybersecurity
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
View original on thehackernews.comOverview
An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by unsuspecting users, serves malicious JavaScript loader code through Magento CMS blocks. "When you
SpinGraph analysis pending — check back after processing.
Ask AI about this story
Opens with the SpinGraph .md URL and structured context — one click, prompt included.
More from The Hacker News
View all →- CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
- Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
- ⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
- Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
- Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
Markdown (.md) · JSON-LD schema (.json) · Machine-readable for AI & GEO