Woocommerce

Sansec threat research on woocommerce. Our forensics team monitors attacks on online stores around the clock and publishes findings to help merchants stay protected.

← Browse all tags

You have 2 weeks left to set up CSP for your store

Mar 17th • Increasing use of Content Security Policy (CSP) as PCI-DSS 4.0 goes live on April 1st. However, our research shows that most online stores have not enabled CSP reporting - a critical requirement un...

pci ecommerce-security magento +3

Malware Persistence via Telegram and GitHub

Aug 22nd • Credit card thieves now use Telegram and Github to steal customer data.

magecart web-skimming woocommerce

Fake payment page before checkout on Shopify and BigCommerce

Dec 24th • A new type of web skimmer was found on a dozen stores hosted on Shopify, BigCommerce, Zen Cart and WooCommerce. Hosted (SaaS) ecommerce platforms like BigCommerce and Shopify do not allow custom Ja...

web-skimming ecommerce-security double-tap +1