close
  • Ar chevron_right

    Boom! Hacked page on mobile phone website is stealing customers’ card data

    news.movim.eu / ArsTechnica · Tuesday, 6 October, 2020 - 00:20

A cartoon depicts a thief emerged from one computer and reaching onto the screen of another.

Enlarge / Computer hacker character stealing money online. Vector flat cartoon illustration (credit: GettyImages )

If you’re in the market for a new mobile phone plan, it’s best to avoid turning to Boom! Mobile. That is, unless you don’t mind your sensitive payment card data being sent to criminals in an attack that remained ongoing in the last few hours.

According to researchers from security firm Malwarebytes, Boom! Mobile’s boom.us website is infected with a malicious script that skims payment card data and sends it to a server under the control of a criminal group researchers have dubbed Fullz House. The malicious script is called by a single line that comprises mostly nonsense characters when viewed with the human eye.

encoded-string-640x563.png

(credit: Malwarebytes)

When decoded from Base64 format , the line translates to: paypal-debit[.]com/cdn/ga.js. The JavaScript code ga.js masquerades as a Google Analytics script at one of the many fraudulent domains operated by Fullz House members.

Read 5 remaining paragraphs | Comments

index?i=pkO1ub6t4hw:iD_cFwrBC2g:V_sGLiPBpWUindex?i=pkO1ub6t4hw:iD_cFwrBC2g:F7zBnMyn0Loindex?d=qj6IDK7rITsindex?d=yIl2AUoC8zA
Hamburger amigurumi Burger Tech Podcast Logo en coton au crochet

Je ne suis que très peu burger 🍔 mais j’ai trouvé celui de mes amis de @BurgerTech_fr si inspirant que je l’ai crocheté!

Je vous invite à écouter @jside et @Ga3tanTheGeek pour l’actu High tech et un peu WTF inside #amigurumi => http://www.doomyflocrochet.com http://www.burgertech.fr #burger #crochet #amigurumi #listing #crochetshop #ecommerce #podcast #hightech