There's no shortage of stories about the many ways companies can accidentally leave their customers' private data exposed on the internet, and that can be a scary thought. But it can be even worse than that when third-party entities go out of their way to infiltrate the websites of such companies to actually steal sensitive information, which has apparently happened to online retailer Newegg over the past month.
A report by security researchers from RiskIQ, who worked together with cybersecurity firm Volexity, says that a hacking group known as Magecart recently targeted the company's customers with a cleverly designed attack. The group registered the neweggstats.com domain, which looks fairly legitimate at first sight, especially being that the domain had a certificate issued by COMODO. The attackers then set the domain up to skim the credit card information of customers and placed the skimmer on the payment page of the checkout process, which affected both mobile and desktop devices...
Read more: Newegg customers may have had their credit card information stolen - Neowin