Web based keyloggers are the new buzz in the hacker network. These keyloggers have been planted in popular ecommerce websites by the hackers and are being used to steal the credit card data. As per a study conducted by RiskIQ and ClearSky at least 100 sites that have been compromised have been identified as of now. The report says the number could run into thousands.
The report has identified popular ecommerce sites like Everlast Worldwide and FidelityStore to be infected with these web based keyloggers. The report further says that credit card details are stolen in real time when the user is making a purchase. This is not the first time such web-based keyloggers have been identified. Infact previously the researchers had unearthed keyloggers that could exploit the vulnerability in the open source Magento ecommerce platform. However the newer versions are not only targeting Magento but other platforms as well that include Powerfront CMS and OpenCart.
While such type of attacks are not new but a dangerous trend is on the rise. The customers should collectively exert pressure on the ecommerce websites to maintain highest standards of security and ensure them that their sensitive data is not being stolen.