Get the latest tech news
Supply-chain attack lies dormant for six years before striking hundreds of e-commerce sites
At least three vendors of e-commerce software tools were compromised in a coordinated supply chain attack dating back at least six years. According to security firm Sansec,...
Facepalm: Supply chain attacks can remain dormant for extended periods before striking their target, but they typically don't take years to achieve their objectives. According to security firm Sansec, the unknown attackers injected a dangerous backdoor into the vendors' products, only taking control of third-party e-commerce servers a few days ago. Once activated, the backdoor executed its malicious payload in users' browsers, stealing payment information in a manner reminiscent of a typical Magecart attack.
Or read this on r/technology
