OVER 1K ONLINE SHOPS HACKED TO SHOW FAKE PRODUCT LISTINGS

Summary from the TLDR InfoSec newsletter

HUMAN's Satori Threat Intelligence team detected a new phishing campaign dubbed Phish n' Ships. The campaign utilizes n-day vulnerabilities, misconfigurations, and compromised admin credentials to upload fake SEO-optimized listings to compromised online shops. The listings redirect users to payment forms that allow the attackers to steal their credit card information. HUMAN has taken efforts to disrupt the campaign by reporting fake listings to Google as well as the online shops.