Connect with us

WORDPRESS

Researchers Spot a Different Kind of Magecart Card-Skimming Campaign

Published

on

Researchers Spot a Different Kind of Magecart Card-Skimming Campaign

An attacker under the Magecart umbrella has infected an unknown number of e-commerce sites in the US, UK, and five other countries with malware for skimming credit card numbers and personally identifiable information (PII) belonging to people making purchases on these sites. But in a new wrinkle, the threat actor is also using the same sites as hosts for delivering the card-skimming malware to other target sites.

Researchers from Akamai who spotted the ongoing campaign note that this not only makes the campaign different from prior Magecart activity, but it’s also much more dangerous.

They assess that the cyberattacks have been going on for at least one month and have potentially affected tens of thousands of people already. Akamai said that in addition to the US and UK, it has spotted websites affected by the campaign in Brazil, Spain, Estonia, Australia, and Peru.

Payment Card Theft & More: A Double Compromise

Magecart is a loose collective of cybercriminal groups involved in online payment card-skimming attacks. Over the past several years, these groups have injected their namesake card skimmers into tens of thousands of sites worldwide — including sites such as TicketMaster and British Airways —and stolen millions of credit cards from them, which they have then monetized in different ways. 

Akamai counted Magecart attacks on 9,200 e-commerce sites last year, of which 2,468 remained infected as of the end of 2022.

The typical modus operandi for these groups has been to surreptitiously inject malicious code into legitimate e-commerce sites — or into third-party components such as trackers and shopping carts — that the sites use, by exploiting known vulnerabilities. When users enter credit card information and other sensitive data on the checkout page of compromised websites, the skimmers silently intercept the data and send it to a remote server. So far, attackers have primarily targeted sites running the open source Magento e-commerce platform in Magecart attacks.

Advertisement

The latest campaign is slightly different in that the attacker is not just injecting a Magecart card skimmer into target sites but is also hijacking many of them to distribute malicious code. 

“One of the primary advantages of utilizing legitimate website domains is the inherent trust that these domains have built over time,” according to the Akamai analysis. “Security services and domain scoring systems typically assign higher trust levels to domains with a positive track record and a history of legitimate use. As a result, malicious activities conducted under these domains have an increased chance of going undetected or being treated as benign by automated security systems.”

In addition, the attacker behind the latest operation has also been attacking sites running not just Magento but other software, such as WooCommerce, Shopify, and WordPress.

A Different Approach, Same Outcome

“One of the most notable parts of the campaign is the way the attackers set up their infrastructure to conduct the web skimming campaign,” Akamai researcher Roman Lvovsky wrote in the blog post. “Before the campaign can start in earnest, the attackers will seek vulnerable websites to act as ‘hosts’ for the malicious code that is used later on to create the web skimming attack.”

Akamai’s analysis of the campaign showed the attacker using multiple tricks to obfuscate the malicious activity. For example, instead of injecting the skimmer directly into a target website, Akamai found the attacker injecting a small JavaScript code snippet into its webpages that then fetched the malicious skimmer from a host website. 

The attacker designed the JavaScript loader to look like Google Tag Manager, Facebook Pixel tracking code, and other legitimate third-party services, so it becomes hard to spot. The operator of the ongoing Magecart-like campaign also has been using Base64 encoding to obfuscate the URLs of compromised websites hosting the skimmer. 

Advertisement

“The process of exfiltrating the stolen data is executed through a straightforward HTTP request, which is initiated by creating an IMG tag within the skimmer code,” Lvovsky wrote. “The stolen data is then appended to the request as query parameters, encoded as a Base64 string.”

As a sophisticated detail, Akamai also found code in the skimmer malware that ensured it did not steal the same credit card and personal information twice.

Source link

Keep an eye on what we are doing
Be the first to get latest updates and exclusive content straight to your email inbox.
We promise not to spam you. You can unsubscribe at any time.
Invalid email address

WORDPRESS

Your New Favorite Way to Develop WordPress Locally – WordPress.com News

Published

on

By

Your New Favorite Way to Develop WordPress Locally – WordPress.com News

Meet Studio by WordPress.com, our new, free, open source local WordPress development environment.

Say goodbye to manual tool configuration, slow site setup, and clunky local development workflows, and say hello to Studio by WordPress.com, our new, free, open source local WordPress development environment.

We’ve built Studio to be the fastest and simplest way to build WordPress sites locally.

Advertisement

Designed to empower developers, designers, and site builders, Studio offers a seamless solution for creating and running WordPress sites directly on your local machine, as well as showcasing work-in-progress sites with your clients, teams, and colleagues.

Check out a few of our favorite features in the video below:

A new way to develop WordPress locally, available for free

Studio is now available to use for free on Mac*, and you can get up and running with a new local site in just a few minutes:

  1. Download Studio for Mac.
  2. Install and open Studio.
  3. Click Add site, and you’re done!

Once you have a local site running, you can access WP Admin, the Site Editor, global styles, and patterns, all with just one click—and without needing to remember and enter a username or password.

You can even open your local sites in your favorite development tools, such as VS Code, PhpStorm, Terminal, and Finder, making it even easier to add Studio to your existing development workflow.

Plus, Studio is open source; feel free to fork away on GitHub.

*A Windows version of Studio is coming soon, and you can request early access here

Advertisement

Effortlessly share your work and keep moving forward

In the realm of web development, showcasing local work has often been a challenge when projects live solely on your machine. With Studio’s demo sites, you have a convenient, built-in solution for sharing your progress with your team, clients, or designers. 

These publicly-accessible demo sites, hosted on WordPress.com, are a convenient way to share your work without the need for complex server setups or lengthy deployments. In less than 15 seconds, you can have a shareable link to your local site that stays active for seven days.

The best part? Demo sites can be refreshed to reflect your latest build, allowing you to easily convey any updates or changes!

Breaking free from traditional constraints

Unlike traditional local environment tools like MAMP or Docker, Studio takes a fresh approach to local WordPress development. Studio is a lightweight and efficient solution that minimizes overhead and maximizes simplicity by forgoing the need for web servers, MySQL servers, or virtualization technologies.

Behind the scenes, Studio uses WordPress Playground, the WebAssembly-powered PHP binary. Thanks to this technology, there is no need to use a traditional web server, making your development experience much quicker and smoother.

Say goodbye to complex setups and compatibility issues. Studio makes it easier than ever to build and manage WordPress sites locally.

Advertisement
a cursor clicking a white Add Site button on Studio by WordPress.com

Let’s get building

At WordPress.com, we’re committed to making your website management experience seamless. In the last few years alone, we launched staging sites with synchronization features, SSH and WP-CLI access, global edge caching, GitHub Deployments, and more. 

Studio is yet another powerful feature to add to your toolkit. Stay tuned for more exciting updates, and remember to follow our blog to stay in the loop.

And, of course, download Studio today. Your local development workflow will thank you.


Major kudos to the Studio team on this launch! Antonio Sejas, Antony Agrios, Kateryna Kodonenko, Philip Jackson, Carlos García Prim, David Calhoun, Derek Blank, Siobhan Bamber, Tanner Stokes, Matt West, Adam Zielinski, Brandon Payton, Berislav Grgicak, Alexa Peduzzi, Jeremy Massel, Gio Lodi, Olivier Halligon, Matthew Denton, Ian Stewart, Daniel Bachhuber, Kei Takagi, Claudiu Filip, Niranjan Uma Shankar, Noemí Sánchez, and our beta testers.


Join 110.2M other subscribers

Advertisement

Source link

Keep an eye on what we are doing
Be the first to get latest updates and exclusive content straight to your email inbox.
We promise not to spam you. You can unsubscribe at any time.
Invalid email address
Continue Reading

WORDPRESS

Smooth Transition: A Comprehensive Guide to Migrating from WooCommerce to Shopify

Published

on

By

Homestead Gardens

Are you considering migrating from WooCommerce to Shopify but feeling overwhelmed by the process? Fear not! This comprehensive guide is designed to walk you through every step of the migration journey, ensuring a smooth transition for your online store. Whether you’re looking to capitalize on Shopify’s user-friendly interface or seek better scalability for your growing business, this guide has covered you. Let’s dive into the essential steps and strategies for seamlessly migrating from WooCommerce to Shopify.

Understanding the Migration Process

Assessing Your Current WooCommerce Setup

Before embarking on the migration journey, take a thorough inventory of your current WooCommerce setup. Identify your products, categories, customers, and any customizations you’ve made to your store. This assessment will provide a clear roadmap for transferring your data to Shopify without missing any crucial elements.

Choosing the Right Shopify Plan

Shopify offers a range of plans tailored to different business needs, from basic to advanced. Take the time to evaluate your requirements and select the plan that aligns best with your budget and growth goals. Whether you’re a small startup or an established enterprise, Shopify has a plan to suit your needs.

Smooth Transition A Comprehensive Guide to Migrating from WooCommerce to

Preparing Your Data for Migration

Backing Up Your WooCommerce Data

Before initiating the migration process, creating a backup of your WooCommerce data is essential. This ensures that you have a safety net in case anything goes awry during the transition. Export your product listings, customer information, order history, and other relevant WooCommerce data.

Advertisement

Importing Your Data into Shopify

Once you’ve backed up your WooCommerce data, it’s time to import it into Shopify. Shopify provides tools and apps that streamline the data migration process, making it easy to transfer your products, customers, and orders seamlessly. Follow the step-by-step instructions provided by Shopify to upload your data accurately.

Additionally, if you’re migrating from WooCommerce to Shopify, it’s crucial to understand the specific steps involved in this process. Ensure that you follow the recommended procedures and utilize the available resources to facilitate a smooth transition.

Smooth Transition A Comprehensive Guide to Migrating from WooCommerce to

Designing Your Shopify Store

Choosing a Theme

One of the perks of migrating to Shopify is access to a wide range of professionally designed themes. Browse Shopify’s theme library to find a design that reflects your brand identity and complements your products. Whether you prefer a minimalist aesthetic or a bold, eye-catching layout, Shopify has a theme to suit your style.

Customizing Your Theme

Once you’ve selected a theme, customize it to align with your brand’s look and feel. Shopify’s intuitive drag-and-drop editor makes it easy to tweak your theme’s layout, colors, fonts, and imagery without any coding knowledge required. Experiment with different customization options until you’re satisfied with the overall design of your Shopify store.

1713966966 555 Smooth Transition A Comprehensive Guide to Migrating from WooCommerce to

Configuring Your Settings and Features

Setting Up Payment Gateways

Shopify offers a variety of payment gateways to accommodate different customer preferences. Configure your preferred payment methods, including credit cards, PayPal, Apple Pay, and more, to provide a seamless checkout experience for your customers. Ensure that your payment gateways are integrated securely to protect sensitive customer information.

Managing Shipping Options

Streamline your shipping process by configuring your shipping settings in Shopify. Set up shipping zones, rates, and fulfillment preferences to ensure accurate shipping costs and delivery times for your customers. Shopify’s built-in shipping tools make it easy to manage your shipping logistics efficiently.

Advertisement

1713966966 269 Smooth Transition A Comprehensive Guide to Migrating from WooCommerce to

Launching Your Shopify Store

Testing Your Store

Before going live with your Shopify store, thoroughly test its functionality to identify and resolve any issues. Conduct test transactions, navigate the checkout process, and review your store’s performance on different devices and browsers. Address any bugs or discrepancies to ensure a smooth launch for your Shopify store.

Announcing Your Launch

Once you’re satisfied with the functionality and design of your Shopify store, it’s time to announce your launch to the world. Generate excitement among your audience by promoting your new store on social media, email newsletters, and other marketing channels. Offer exclusive deals or discounts to incentivize customers to explore your new Shopify storefront.

1713966966 262 Smooth Transition A Comprehensive Guide to Migrating from WooCommerce to

Post-Migration Optimization

Monitoring Performance Metrics

After migrating to Shopify, monitor your store’s performance metrics to gauge its success. Track key metrics such as traffic, conversion rates, and average order value to identify areas for improvement. Use Shopify’s built-in analytics tools or integrate third-party analytics platforms to gain valuable insights into your store’s performance.

Continuously Improving Your Store

Optimize your Shopify store based on the insights gleaned from your performance metrics. Experiment with different marketing strategies, product offerings, and user experience enhancements to maximize your store’s potential. Continuously seek customer feedback and iterate on your store’s design and functionality to stay ahead of the competition.

Conclusion

In conclusion, migrating from WooCommerce to Shopify can be a manageable task. By following the steps outlined in this comprehensive guide, you can navigate the migration process with confidence and ease. From assessing your current setup to launching your new Shopify store and beyond, this guide equips you with the knowledge and tools to make a smooth transition. Embrace Shopify’s opportunities for scalability, flexibility, and growth, and watch your online business thrive in its new home.

1713966966 577 Smooth Transition A Comprehensive Guide to Migrating from WooCommerce to

Advertisement



Source link

Keep an eye on what we are doing
Be the first to get latest updates and exclusive content straight to your email inbox.
We promise not to spam you. You can unsubscribe at any time.
Invalid email address
Continue Reading

WORDPRESS

WordPress Block Patterns Give You Superpowers – WordPress.com News

Published

on

By

WordPress Block Patterns Give You Superpowers – WordPress.com News

Few WordPress features offer more return on your learning investment than block patterns.

With the power of block patterns you’ll be a WordPress superstar in no time, whether you’re an establish pro or just starting out. Block patterns are professionally designed layouts that you can add your site in a single click. What makes them especially powerful is that once they’re inserted, you can edit and customize every aspect. (Or, you can leave them be!)

In today’s Build and Beyond video, Jamie Marsland walks you through everything you need to go to become a block pattern expert, in under four minutes.

Get started on your site today with a free trial:


Join 110.2M other subscribers

Advertisement

Source link

Keep an eye on what we are doing
Be the first to get latest updates and exclusive content straight to your email inbox.
We promise not to spam you. You can unsubscribe at any time.
Invalid email address
Continue Reading

Trending

Follow by Email
RSS