ZEE Business
ZEE BUSINESS
हिंदी में पढ़ें  हिंदी में पढ़ें
Live TV
Live TV
  • Home
  • Personal Finance
  • Markets
    • Stocks
    • Global Markets
    • IPO
    • Companies
    • Currency
    • Commodities
  • My Money
  • Web Stories
  • Calculators
    • Income Tax Calculator
    • Home Loan/EMI Calculator
    • Mutual Fund Returns Calculator
    • Personal Loan Calculator
    • Car Loan Calculator
    • SIP calculator
    • Lumpsum Calculator
    • SWP Calculator
  • Videos
    • M Se Market
    • Jeb Zindagi Zaroorat
    • Light Camera Stocks
    • Tech Takes
    • Big Bulls Ka Nishana
    • Paisa Wasool
    • Commodity Ke MrityunjayMantra
    • The Right Property Show
  • Economy & Infra
    • Policy & Initiatives
    • Agriculture
    • Telecom
    • Aviation
    • Railways
    • Retail
    • Roadways
    • World Economy
  • Exclusive
    • Wealth Guide
    • Interviews
  • Auto
    • Cars
    • Bikes
    • Electric Vehicle
    • Commercial Vehicles
  • Tech
    • Mobiles
    • Gadgets
    • Reviews
    • Tips and Tricks
    • Apps
  • Samco Acers
  • Samco Mission Ace The Index
  • Real Estate
    • Home Buyers
    • Builders
  • Trending
    • Entertainment
    • Politics
    • Lifestyle
    • Travel
    • Sports
    • Viral
    • Education
    • Jobs
Read in App
Business News » Technology News

Online Shoppers Beware! New way of stealing credit card payment information discovered; here is how to stay safe

Researchers at Kaspersky have said that attackers can collect users’ card details by registering for Google Analytics accounts and injecting these accounts’ tracking code into the websites’ source code. About two dozen online stores worldwide were compromised using this method.

  • Twitter
  • Facebook
  • Linkedin
  • whatapp
  • View in App
Online Shoppers Beware! New way of stealing credit card payment information discovered; here is how to stay safe
About two dozen online stores worldwide were compromised using this method. Source - Reuters.

Online shopping has picked up following the coronavirus outbreak. As expected it has led to newer challenges with hackers using a new technique for stealing users’ payment information on online shopping websites, through a type of attack known as web skimming. Researchers at Kaspersky have said that attackers can collect users’ card details by registering for Google Analytics accounts and injecting these accounts’ tracking code into the websites’ source code. About two dozen online stores worldwide were compromised using this method.

Web skimming is a popular practice used by attackers to steal users’ credit card details from the payment pages of online stores, whereby attackers inject pieces of code into the source code of the website. 

This malicious code then collects the data inputted by visitors to the site (i.e. payment account logins or credit card numbers) and sends the harvested data to the address specified by attackers in the malicious code. Often, to conceal the fact that the webpage has been compromised, attackers register domains with names that resemble popular web analytics services, such as Google Analytics. 

When the malicious code is injected, it’s harder for the site administrator to know that the site has been compromised. For example, a site named “googlc-analytics[.]com” is easy to mistake as a legitimate domain.

WATCH Zee Business TV LIVE Streaming Online

Kaspersky said that it has discovered a previously unknown technique for conducting web skimming attacks. Rather than redirecting the data to third-party sources, they redirected it to official Google Analytics accounts. Once the attackers registered their accounts on Google Analytics, all they had to do was configure the accounts’ tracking parameters to receive a tracking ID. They then injected the malicious code along with the tracking ID into the webpage’s source code, allowing them to collect data about visitors and have it sent directly to their Google Analytics accounts.

As the data isn’t being directed to an unknown third-party resource, it’s difficult for administrators to realize the site has been compromised. At first, it appears that this could be a usual problem with the Google account. 

“This is a technique we have not seen before, and one that is particularly effective. Google Analytics is one of the most popular web analytics services out there. The vast majority of developers and users trust it, meaning it’s frequently given permission to collect user data by site administrators. That makes malicious injects containing Google Analytics accounts inconspicuous—and easy to overlook. As a rule, administrators should not assume that, just because the third-party resource is legitimate, its presence in the code is ok,” Victoria Vlasova, Senior Malware Analyst at Kaspersky explained.

How to stay safe?

Kaspersky experts recommend users to use a reliable security solution which can detect and block malicious scripts from being run or disable Google Analytics altogether using the Safe Browser feature.

Get Latest Business News, Stock Market Updates and Videos; Check your tax outgo through Income Tax Calculator and save money through our Personal Finance coverage. Check Business Breaking News Live on Zee Business Twitter and Facebook. Subscribe on YouTube.

TAGS:
E commerceCyber SecurityTechnology
Written By: ZeeBiz WebTeam
Edited By: Harish Dugh
Updated: Wed, Jun 24, 2020
04:59 pm
New Delhi, ZeeBiz WebDesk
RELATED NEWS
Leading facility management company announces hiring over 10,000 professionals this year, eyes steady growth in revenue Leading facility management company announces hiring over 10,000 professionals this year, eyes steady growth in revenue
E-commerce in India: What are Early Bird Discounts and does it translate to boost in sales? E-commerce in India: What are Early Bird Discounts and does it translate to boost in sales?
E-commerce player Snapdeal drops IPO plan, withdraws DRHP E-commerce player Snapdeal drops IPO plan, withdraws DRHP
Meesho joins govt's Open Network for Digital Commerce Meesho joins govt's Open Network for Digital Commerce
How Indian Home Decor E-Commerce Industry Is Geared Up To Spread Its Wings - Expert Decodes How Indian Home Decor E-Commerce Industry Is Geared Up To Spread Its Wings - Expert Decodes

LATEST NEWS

Netflix, Amazon, Disney-backed group protests India's tobacco rules

Ola Electric to kick off investor meet on IPO plans

SpiceJet plans to add 10 narrow-body Boeing aircraft, including five B737 Max

Nomura's India head of investment banking steps down

Paytm shares rise 5% in early trade: Key factors behind the rally

Exclusive: India likely to sell BrahMos missiles to Vietnam in deal ranging up to $625 million

White House COVID-19 Coordinator Ashish Jha to leave post by June end: President Biden

Iran denies report of nearing interim nuke deal with US

Donald Trump risked national secrets, US prosecutors allege in indictment

Avatar 2 to Bloody Daddy: This movie line up is too good to miss

  • India News
  • World News
  • Companies News
  • Market News
  • Personal Finance News
  • Technology News
  • Automobile News
  • Small Business News
  • Income Tax Calculator
  • Live TV
  • Videos
  • Photos
  • Author
  • Rss Feed
  • Advertise with us
  • Privacy Policy
  • Legal Disclaimer

Latest Trending Updates

  • EPFO
  • Budget 2020
  • Income Tax Return
  • Auto Expo 2020
  • Home Loan
  • Business News

Trending Topics

  • Income Tax
  • income Tax Calculator
  • 7th Pay Commission
  • Reserve Bank of India
  • GST
  • Latest Business News

Follow us on

zeebiz
zeebiz

Partner Sites

  • Zee News
  • Hindi News
  • Marathi News
  • Bengali News
  • Tamil News
  • Malayalam News
  • Gujarati News
  • Telugu News
  • Kannada News
  • DNA
  • WION
© 2023. Indiadotcom Digital Private Limited. All Rights Reserved.
LIVE TV