Online purchases: alert against “formjacking”, this new technique for stealing your bank details

Very worrying... Note, if you don't have money like us, that should immediately limit the problem; )))))... For the others, good luck, with a bit of luck, they won't even realize it, their bank details will just be added to the billions of sesames already available on the Darkweb for a few €uros...

Good night,

friendships

f.

“Ransomware” and “cryptojacking” no longer earn enough, cybercriminals now practice “formjacking” or “form theft”, warns the computer security group Symantec in its annual report. This process consists of collecting banking information via e-commerce sites by injecting malicious code. 3,7 million such attacks were blocked in 2018. 

A new threat hangs over Internet users who shop on e-commerce sites: “formjacking”. This is a malicious code injected into e-commerce sites to retrieve individuals' banking information. This process is a "real threat to businesses and consumers", warned this Wednesday, February 20, the computer security group Symantec in its annual report on cyber threats.

3,7 million attacks blocked in 2018

According to the antivirus publisher, more than 4800 websites are affected each month by the intrusion of this malicious code. The threat is not to be taken lightly. Symantec says it has “blocked over 3,7 million formjacking attacks on endpoints” throughout 2018 and worldwide.

If formjacking is gaining momentum, it is because it pays more than other forms of piracy. “Ransomware attacks (confiscation of user data with ransom payment, editor’s note) and cryptojacking (internet server, computer, or telephone used to create cryptocurrencies without the knowledge of its owner, editor’s note) no longer being so profitable than before, cybercriminals are now turning to more lucrative alternative methods like formjacking”, says Symantec.

$17 million stolen from British Airways customers

The technique employed here by cyber criminals takes the form of form stealing. It is similar to that affecting ATMs replaced by almost identical fake ATMs. Customers enter their secret code which is then recovered by the crooks.

With the integration of a fake form in e-commerce sites, cybercriminals act in the same way. They collect data from users who think they enter it from the online merchant. The process reportedly earned tens of millions of dollars for cybercriminals in 2018. “The recent British Airways attack last September would have allowed cybercriminals to raise more than 17 million dollars”, believes in particular the Californian cybersecurity group.

Some countries are more affected than others. Thus, the United States concentrates 33,3% of the total number of blocked attacks, followed by Belgium (23,6%) and Australia (7,5%). France is less affected. With only 1% of attacks blocked, it is in 14th position in the world ranking.

Source (s): Boursorama.com via Anonymous Contributor

Further information :