Displaying items by tag: Yonathan Klijnsma

Senior threat researcher Yonathan Klijnsma of the firm RiskIQ has died a few days short of his 30th birthday, with the talented hacker meeting his end at the hands of cancer.

Security firm RiskIQ says it has tried several times to contact blender manufacturer NutriBullet to inform the latter of a JavaScript skimmer that was noticed on its international website on 20 February — an attack that has been identified as being carried out by one of the Magecart groups, in this case Group 8 — but has not heard back from the blender manufacturer.

An established group that steals data through phishing and card-skimming is using new infrastructure and activities to generate revenue, the security firm RiskIQ says, adding that it has named the group Fullz House based on its operations.

A cyber crime syndicate known as Magecart, which is made up of dozens of sub-groups that indulge in credit card theft by skimming online payment forms, has been found to be implicated in more than two million such attacks.

Sites that have been decommissioned due to attacks by the card-skimming attack group Magecart are being hijacked and re-used for other malicious activity once they come back online by a secondary group of cyber criminals, the security firm RiskIQ claims.

Attackers who breached networks at India's second largest outsourcing company, Wipro, were part of a sophisticated campaign that used both commercial and open-source marketing tools to hit many organisations with phishing attacks. Most of these were firms that deal in gift cards.

British Airways has updated its advice on a breach of customer data, saying the payments cards of another 185,000 people could be affected, in addition to the 380,000 first mentioned.

Security firm RiskIQ has discovered another case of a site breach by the group Magecart, this time against Shopper Approved, a customer rating plugin that is used on thousands of ecommerce sites.

The malicious attacker, or attackers, known as Magecart, who infiltrated the British Airways website last month, have now attacked online retailer Newegg using a new domain named neweggstats.com that they registered in August.

Security firm RiskIQ has claimed that the breach of the British Airways website was carried out by a group known as Magecart which was also responsible for infiltrating the Ticketmaster UK website earlier this year.