Malware Spreads Through FishPig Distribution Server to Infect Magento-Powered Stores
A security warning has been issued to the owner of the largest online retailer in the world.
For several weeks, Magento stores have been infected with malware as a result of a supply chain attack on the FishPig distribution server. As per Sansec security researchers who discovered the intrusion, the injected code would install another piece of malware called Rekoobe, which would hide as a background process on the compromised servers. FishPig issued a warning on Tuesday about an intrusion into its extension licence system that resulted in a threat actor injecting malicious PHP code into the Helper/License.php file.
Source read time: 1 min - itsecuritynews.info
Also offered in: Nederlands