PSA - Diode Dynamics hacked

[Shorty1315]

Hey all!! Just a quick PSA, I received an email from Diode Dynamics this morning regarding a security breach.

I had placed an order several months ago and last week my credit card was used for a fraudulent purchase. I have alerting setup, so only 1 purchase was made before freezing my card. If you have ordered anything from them, you may want to keep an eye on your credit card.

 

[jimothy]

Edit: I read that too quickly. It was a client side script injection, which explains how CVV could be exposed without being stored. The account number, CVV, address, etc. was stolen as it was entered into the browser.

Ooh boy, somebody screwed up! They mention CVV (three or four digit verification code) may be among the data leaked. PCI DSS (standards for merchants that accept credit cards) prohibit storing CVV. If they were following standards, it wouldn’t have even been possible for those codes to be stolen. It makes you wonder what other mistakes they made in building their e-commerce system.

They may also be subject to fees for being out of compliance. Good luck to them, and to the affected customers

 

[StealthTech6]

Magecart attack.

Microsoft Defender Threat Intelligence | Microsoft Security

Microsoft Defender Threat Intelligence is a dynamic threat intelligence solution that helps protect your organization from modern cyberthreats and exposure.

www.riskiq.com