Get Permission
A cybercriminal gang known as UltraRank has launched a new campaign, targeting at least a dozen e-commerce sites to steal payment card data using a JavaScript sniffer, says security firm Group-IB.
This new series of attacks, which began in November, uses a relatively new JavaScript-sniffer called SnifLite, according to Group-IB. The firm’s researchers contacted all the companies affected, but as of Wednesday, eight of the targeted sites remained infected with the malicious JavaScript code, they say. We assume that the gang will continue the infections as part of this campaign, as their operations in the past followed the same pattern of infections distributed over time, says Viktor Okorokov, threat intelligence and attribution analyst at Group-IB.