Blog

Security Research

The Art of Concealment: A New Magecart Campaign That’s Abusing 404 Pages

Roman Lvovsky is a Security Researcher with extensive experience in client-side threats, browser internals, and JavaScript attack vectors. He is a member of the Akamai Security Intelligence Group and focuses his research on various client-side threats, such as web skimming and Magecart attacks. He has a solid background in software engineering, with a specialization in JavaScript and web development.

Executive summary

\r\n \r\n The Akamai Security Intelligence Group detected a Magecart web skimming campaign that is targeting an extensive list of websites, including large organizations in the food and retail industries.

\r\n

\r\n This campaign stands out because of its three advanced concealment techniques, one of which we had never seen before — specifically, manipulating the website’s default 404 error page to hide malicious code — that poses unique challenges for detection and…