953 Online Stores Infected by Long-Running Magento Malware Campaign
An unknown threat actor has infected 953 e‑commerce sites, primarily running Magento, with a small loader code that either serves malicious JavaScript to visitors or remains dormant to evade detection. The campaign has been active since July 2025, according to Dutch security firm Sansec. The injected code is placed in Magento CMS blocks and delivers a JavaScript loader when the compromised pages are visited.
Why it matters: E‑commerce operators and security teams must address this persistent threat to protect customer data and prevent abuse of their storefronts.
Read the coverage
More in Security
Security13h ago2 sources
Security11h ago2 sources
Security16h ago2 sources