Symantec takes a look at malicious JavaScript code used to steal credit card and other payment information. Formjacking has been found behind several attacks on online businesses. Symantec reveals the code has different iterations. In one situation, formjacking code was used to take payment information from 30 websites around the world, all of which were funneled to one website located in Paris. Another situation saw formjacking used to force browsers to load infected JavaScript code to make off with the data. “This latest formjacking campaign highlights the fact that attackers are continuously altering and improving their malicious code and exploring new delivery mechanisms to infect more users,” Symantec Threat Analysis Engineer Siddhesh Chandrayan wrote in a blog post.
Full Story