Introduction
Digital threat management company RiskIQ tracks the activity of MageCart group and reported their use of web-based card skimmers since 2016.
Activities and Tactics
Information pending cataloguing.
Notable Campaigns
- Direct Clothing Co. UK (DDCUK) (August 2021; Magecart (suspected) (eCrime))
- Chartered Institute for Securities & Investment (CISI) (February 2020; Magecart (suspected) (eCrime))
Tactics, Techniques, and Procedures (TTPs)
Information pending cataloguing.
Notable Indicators of Compromise (IOCs)
No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.
Malware and Tools
Information pending cataloguing.
Attribution and Evidence
Information pending cataloguing.
References
[1] BushidoToken Breach Report Collection - Direct Clothing Co. UK (DDCUK) breach report (August 2021) via ico.org.uk Source index: https://github.com/BushidoUK/Breach-Report-Collection; adversary label: Magecart (suspected) (eCrime). [2] BushidoToken Breach Report Collection - Chartered Institute for Securities & Investment (CISI) breach report (February 2020) via ico.org.uk Source index: https://github.com/BushidoUK/Breach-Report-Collection; adversary label: Magecart (suspected) (eCrime).