VB2019 paper: Inside Magecart: the history behind the covert card-skimming assault on the e-commerce industry

Magecart is an umbrella-term for various groups that engage in placing JavaScript code on e-commerce sites to steal credit card info. Magecart attacks go back almost a decade but it became an infosec household name following some prominent breaches in 2018.

Magecart is getting a lot of attention from security researchers, and

RiskIQ

‘s Yonathan Klijnsma is probably the most prolific among them. He was one of the authors of a 2018

report

that detailed the modi operandi of the various Magecart groups.

A rich underground economy exists around all the different steps needed to monetize a breach.

At VB2019 in London earlier this month, Yonathan also presented a paper on Magecart in which he looked at some of the more interesting groups and the latest Magecart trends.

Today we publish Yonathan’s paper in both

HTML

and

PDF

format. We have also uploaded the video of his VB2019 presentation to our

YouTube

channel.