BankInfoSecurity reports more than 7,000 e-commerce sites have been infected with malicious JavaScript designed to harvest customers’ payment details in the past six months. Security Consultant and Researcher Willem de Groot warns the card-skimming malware is being used to infect 50 to 60 e-commerce sites daily and communicates with Moscow-based domain MagentoCore. In a blog post, de Groot recommends several best practices to spot infection. He writes, "If suspicious activity is recorded from staff IPs, it could be that a staff computer is infected with malware, or that the attacker has hijacked an authorized session." 
Full Story