Sansec Research: Postponed Exfiltration Evades Detection

Hacked store?
Make sure it never happens again with eComscan.

eComscan is the most thorough malware & vulnerability scanner for Magento, WooCommerce and Shopware.

Over 50k+ malware signature checks and counting. Updated daily.

Deep server-side scanning with the broadest attack surface coverage.

Adobe and Europol partner with Sansec to prevent digital skimming.

Scanning your store for known malware or vulnerabilities takes about one minute:

$ curl https://ecomscan.com | sh

Running eComscan is free and we’re obsessive about data privacy. Paid plans include detailed reporting and troubleshooting guides.

Compatible with: Magento / Adobe Commerce, WooCommerce & Shopware. Manual installation instructions

Media coverage

Show all

Sansec focuses exclusively on ecommerce fraud, and we're often first to the scene: 47% of our threat intel was previously undiscovered.

Sansec at Europol training: 50,000+ stores hacked

Cementing itself as a global force in the protection against eCommerce fraud, Sansec has been invited to speak at the fifth edition of Europol's Training Course on Payment Card Fraud...

Adobe partners with Sansec in helping with preventing digital skimming

Through this partnership, Adobe will be adding about 9,000 malware and vulnerability signatures to the Adobe Commerce Security Scan tool. Each of these signatures has undergone a multistage testing ...

Malware Persistence via Telegram and GitHub

Attackers are devising ingenious methods to prolong their skimming activities, aiming for sustained persistence. The usual tactics, techniques, and procedures (TTP) include the creation of disposa...

Postponed Exfiltration Evades Detection

The domain gtag-analytics.com has recently emerged as a threat, employing various cunning techniques to evade detection and targeting unsuspecting users, but what makes it especially deceptive is i...

ecomscan

Specifically designed to combat & prevent fraud in ecommerce applications

eComscan is not another generic security solution. Reports are highly specific and application-aware, covering every known attack vector our forensics team has uncovered in over a decade of daily ecommerce fraud reseach.

50k+ malware signatures and counting

Sansec has the largest collection and coverage of ecommerce malware. If there’s a new attack method, we typically discover it weeks ahead of anyone else.

Dedicated anomaly monitoring & investigation

The Sansec Early Breach Global Detection Network inspects over a million online stores every day, and reports anomalies that our research team investigates and translates into actionable threat intel and signatures for our customers.

Broadest coverage of attack surface

Our smart Golang server agent does not just monitor files, but also databases, processes, scheduled tasks and anything else that may contain malicious code. Sansec will find malware that is hidden from remote scans such as PCI Approved Scanning Vendors or the Adobe Security Scan.

Get alerted in seconds, not days

If new security threats are found that are relevant to one of your applications. the eComscan detection engine will send instant, actionable alerts via mail, Slack or API webhook.