PCI DSS – Security Blog https://blog.siteguarding.com Wed, 28 Oct 2026 00:47:56 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://blog.siteguarding.com/wp-content/uploads/2016/07/cropped-Logo_sh_last_2_last-32x32.jpg PCI DSS – Security Blog https://blog.siteguarding.com 32 32 Convertr Checkout Skimmer Hid in a Shared Plausible Tracker https://www.siteguarding.com/security-blog/convertr-checkout-skimmer-plausible/ Wed, 28 Oct 2026 00:47:56 +0000 https://www.siteguarding.com/security-blog/convertr-checkout-skimmer-plausible/ A Brazilian card-skimming gang edited one shared Plausible analytics file and turned it into a Convertr checkout skimmer that ran on every merchant's payment page. If your checkout loads scripts from a server you don't control, list them today and find out who patches that server. Key takeaways It stole payment data from every Convertr checkout by hiding inside an analytics script those checkouts...

Source

]]> Magento Store JavaScript Malware Hits 953 Shops, Dodges Scans https://www.siteguarding.com/security-blog/magento-javascript-malware-953-stores/ Tue, 27 Oct 2026 08:23:41 +0000 https://www.siteguarding.com/security-blog/magento-javascript-malware-953-stores/ Sansec has traced malicious JavaScript loaders in 953 online stores, most of them running Magento, to a single unknown actor active since at least July 2025. This Magento store JavaScript malware hides in database content that file scanners skip and reveals itself only to real shoppers, so a clean scan report does not prove a clean store. Key takeaways An unidentified group has planted JavaScript...

Source

]]>