A China-based e-commerce scam appears to be harvesting payment information not through direct hacks on companies or using pernicious malware to skim data, but with a simpler…
The group, known as “Keeper,” inserted malicious computer code onto the sites, typically by exploiting weaknesses in technology provided by the sites’ third-party software suppliers. (Getty Images)
In this case, according to the FSB, the suspects operated BuyBest/GoldenShop and roughly 90 mirror pages, which were meant to keep the forums running in the event a main site was shut down. (YouTube/Gemini Advisory)
New York-based threat intelligence company Gemini Advisory says it appears that a card-information dump in January points to a more aggressive level of hacking beyond point-of-sale attacks.