Convertr 结账页遭黑客劫持 Plausible 脚本植入盗卡代码三天
Convertr’s checkout pages served a card skimmer for three days after hackers hijacked its self-hosted Plausible analytics script
巴西盗卡团伙在 Convertr 自托管的 Plausible 分析脚本中植入恶意代码，自10月24日起窃取数十家巴西时尚品牌消费者的卡号、有效期、CVV、姓名和 CPF 税号。
A Brazilian card-skimming group planted malicious code in a Plausible analytics script that Convertr self-hosts and loads on every merchant’s checkout page, according to Sansec. Convertr runs online stores and checkout for dozens of Brazilian fashion brands, and from October 24 the skimmer took their shoppers’ card numbers, expiration dates, CVVs, names, and CPF taxpayer IDs. Sansec suspects the attackers got in through CVE-2026-8467, a flaw in older Plausible versions that Plausible patched in May, but it can’t confirm that without Convertr’s server logs. The group had only hit individual Magento, OpenCart, and WooCommerce stores before. Convertr cleaned the script and updated Plausible on October 27, but browsers may keep serving the cached malicious file for up to a day afterward.
Paul Drecksler is the founder and editor of Shopifreaks, covering the most important stories in e-commerce.
Never miss important e-commerce news
Our weekly newsletter is read religiously by 20,000+ e-commerce professionals.
Loading...
来源：shopifreaks · shopifreaks.com