Fashion Site Sixth June Leaking Card Data to Magecart Hackers

Apparel site Sixth June has become the latest brand to suffer a digital skimming attack on its website, according to a security researcher.

RapidStrike systems developer and researcher “Jenkins” took to Twitter yesterday to claim the firm had a live Magecart payment skimmer actively stealing customer card details.

“We reported the hack to their CEO last week but have not yet received a response,” he added, posting screenshots of the malicious JavaScript.

The Paris-based fashion retailer is said to have hundreds of thousands of social media followers, with its designs sold through ASOS, USC and other outlets.

The incident calls to mind an alert raised by another security researcher late last week. Willem de Groot from Sanguine Security claimed that Procter & Gamble’s First Aid Beauty brand had been infected with a payment skimmer since May 5.

This attack is more sophisticated than usual, with the malicious code not activating for non-US visitors, or if the user is running Linux, as many researchers do, he explained.

“I reported the breach to their executives and support team last week, but have yet to receive a reply,” de Groot tweeted last Friday. “FirstAidBeauty was bought last year for $250M. P&G decided to not integrate their new acquisition, which they may regret now.”

Yossi Naar, co-founder of Cybereason, said the Magecart incidents are a “stark reminder” th ..

Support the originator by clicking the read the rest link below.