Web payment card skimmers add anti-forensics capabilities

[sman]

Web payment card skimmers add anti-forensics capabilities

source - https://www.itworld.com/article/3453940/web-payment-card-skimmers-add-anti-forensics-capabilities.html

The newly discovered Pipka script can delete itself from a website after execution, making it very difficult to detect.

Researchers have detected compromises on ecommerce sites with a new JavaScript-based payment card skimmer that uses anti-forensics techniques, including the ability to remove itself from the web page’s code after execution. Dubbed Pipka, the malicious script was found by researchers from Visa’s Payment Fraud Disruption (PFD) team on the site of a North American merchant that had been previously infected with a different skimmer called Inter. Further investigation uncovered another 16 online merchant sites infected with Pipka.