Security News > 2020 > July > Magecart Group Hits 570 Websites in Three Years
Over the past three years, one of the groups operating under the Magecart umbrella has targeted over 570 e-commerce websites and likely made more than $7 million, threat intelligence company Gemini Advisory reports.
Referred to as Keeper, the group operates 64 attacker and 73 exfiltration domains and has hit targets in 55 countries since April 1, 2017.
The group disguised malicious domains as legitimate services, and even attempted to mimic legitimate sites through the use of a different top-level domain or by slightly changing the domain name.
"Given the current dark web median price of $10 per compromised Card Not Present card, this group has likely generated upwards of $7 million USD from stealing and selling compromised payment cards in its full lifespan," Gemini explains.
"The Keeper Magecart group has been active for three years, over which time it has continually improved its technical sophistication and the scale of its operations. Based on this pattern of successful Magecart attacks, Gemini assesses with high confidence that Keeper is likely to continue launching increasingly sophisticated attacks against online merchants across the world," Gemini notes.