13th July – Threat Intelligence Bulletin · 2020-07-13
The North Korean affiliated APT group Lazarus has diversified its operations to include Magecart style credit card skimming. Researchers reported Lazarus infrastructure has been used since at least May 2019 to skim US and European online shoppers’ paycard details on compromised sites, including international fashion chain Claire’s, a modeling agency from Milan, a vintage music store from Tehran and more.
Multiple online stores · 07/06/2020
Researchers from Sansec reveal that North Korea's state-sponsored hacking crews are breaking into online stores for Magecart attacks.
Lazarus Group e-commerce sniffer activity July 2020 (in 'Credit Card Sniffers Pose Persistent Threat') · (no date on page)
These vulnerabilities and trends are not only being exploited by individual threat actors but also by advanced persistent threats (APT) such as the North Korean APT Lazarus Group, identified in July 2020 targeting major online U.S. and European retailer websites.