b2b-daily
Home | IT | Cyber Security

Magento Flaw Exploited: Payment Data Theft on E-Commerce Sites

Avatar photo
by Paige Williams
April 8, 2024
Magento Flaw Exploited: Payment Data Theft on E-Commerce Sites

Cybercriminals exploited a critical vulnerability identified as CVE-2024-20720 in the Magento e-commerce platform, seizing payment data from users. With a severity score of 9.1, this vulnerability enabled arbitrary code execution due to inadequate element security. Although Adobe released a fix in their February 2024 update, numerous breaches had already occurred.

The exploit was first spotted by Sansec, revealing the attackers’ skill in crafting a specialized database template and using a pre-packaged exploit to run unauthorized commands. They inserted a backdoor on the checkout page that surreptitiously implanted a Stripe payment skimmer. This malicious tool secretly captured payment information during transactions, unbeknownst to shoppers or site owners. Despite the February patch from Adobe, the incident illustrates the importance of promptly updating software to protect against such vulnerabilities.

A Global Challenge: Safeguarding Payment Information

The threat landscape is vast, with recent events highlighting its severity. Russian officials recently detained six individuals for infecting over 159,000 international credit cards with skimming malware since 2017, showcasing the enduring risk to financial and retail sectors. This incident serves as a stark reminder that digital transactions are a double-edged sword, offering convenience but exposing us to advanced cyber threats.

Retailers must now be proactive in their cybersecurity measures. Adopting rigorous software maintenance routines and partnering with cybersecurity firms like UnderDefense for external vulnerability scans is crucial. Recognizing that complacency isn’t an option, businesses must leverage the expertise of threat intelligence and vulnerability management professionals. This proactive stance is essential for defending against the stealthy maneuvers of cybercriminals, safeguarding data, and maintaining consumer trust. Only perpetually updated defenses will keep enterprises one step ahead in this ongoing cyber battle.

Digital TransformationInformation Security

Explore more

Three Core Traits of Highly Effective Modern Leaders
March 6, 2026

Ling-yi Tsai, a seasoned expert in HR technology and organizational psychology, has spent decades helping global firms navigate the intersection of human behavior and digital transformation. With a deep focus on HR analytics and talent management, she specializes in translating complex psychological principles into actionable leadership strategies that drive measurable results. Her work emphasizes that the most successful organizations are

How Did UMMC Recover From a Major Ransomware Attack?
March 6, 2026

The sudden silence of a digital heartbeat within a major academic medical center represents one of the most harrowing scenarios in modern healthcare, a reality that the University of Mississippi Medical Center confronted during the final week of February 2026. As the state’s primary academic medical hub, the institution found itself at the mercy of a sophisticated ransomware attack that

How Should We Manage Our Digital Estates After Death?
March 6, 2026

A person’s physical existence eventually concludes, yet their digital presence often persists in a sprawling network of servers that never sleep. Every email, stored photo, and cryptocurrency wallet represents a piece of a digital estate that currently exists in a legal and technical limbo. Without a proactive plan, these assets do not simply disappear; they become ghost accounts that create

Is Your Business Ready for the Rise of AI Insider Risks?
March 6, 2026

The modern corporate landscape has undergone a radical transformation where the most significant threat to an organization no longer originates from a distant hacker, but from the person sitting in the next cubicle. As companies pour resources into perimeter security, the reality of the current year shows that the human element remains the most vulnerable link in the digital chain.

How Does the Coruna Exploit Kit Threaten iPhone Security?
March 6, 2026

The digital landscape has recently been shaken by the emergence of a highly sophisticated mobile threat that transforms the simple act of visiting a website into a gateway for total device compromise. Identified as Coruna, this exploit kit represents a monumental leap in the technical capabilities of cybercriminals, as it weaponizes dozens of distinct vulnerabilities to bypass even the most