Threat actor
Magecart
Tracked by CyberSIXT since 31 Oct 2025
- Articles · all time
- 4
- Articles · last 30 days
- 0
- CVEs exploited · attributed · all time
- 0
- Research reports · all time
- 0
4 articles from 3 outlets since 31 Oct 2025; the latest 222 days ago.
- Article
- First report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 18 Mar · 13:08 UTC | The Hacker News | Claude Code Security and Magecart: Getting the Threat Model Right |
| Thu 15 Jan · 01:00 UTC | SecurityOnline | “Magecart” Strikes Again: Long-Running Web Skimming Campaign Targets Global Payment Networks |
| Wed 14 Jan · 12:55 UTC | Malwarebytes | Online shoppers at risk as Magecart skimming hits major payment networks |
| Fri 31 Oct 2025 · 00:55 UTC | SecurityOnline | Magecart SMILODON Skimmer Infiltrates WooCommerce Via Rogue Plugin Hiding Payload in Fake PNG Image |
Who reported 3 outlets
- SecurityOnline2
- Malwarebytes1
- The Hacker News1
Names and sources
- MageCart
- Named by CyberSIXT coverage
- MageCart
- Named by Malpedia · magecart
- MageCart
- Named by MISP Galaxy · 0768fd50-c547-11e8-9aa5-776183769eab
- Magecart
- Named by CyberSIXT coverage
- Magecart Group 12
- Named by CyberSIXT coverage
- 0768fd50-c547-11e8-9aa5-776183769eab
- Named by CyberSIXT coverage
Malware and tools
- Claude Code Security and Magecart: Getting the Threat Model RightThe Hacker News
- “Magecart” Strikes Again: Long-Running Web Skimming Campaign Targets Global Payment NetworksSecurityOnline
- Online shoppers at risk as Magecart skimming hits major payment networksMalwarebytes
- Magecart SMILODON Skimmer Infiltrates WooCommerce Via Rogue Plugin Hiding Payload in Fake PNG ImageSecurityOnline · first in our coverage