Hackers Used Favicon Website To Steal Credit Card Information

Hackers are constantly on the lookout for new ways of causing mayhem and stealing data.  Recently, researchers have unearthed a new technique to be on guard against. A few hackers have begun embedding credit card stealing scripts inside favicon meta data.  If you're not familiar with the term, you definitely know what a favicon is. It's a custom icon used by websites for branding, associated with a specific URL. Although not universal, they are ubiquitous on the web and most companies have them.

While the idea of embedding malicious scripts on websites to steal credit card information is not new, the notion of hiding those scripts in the EXIF files of a company's favicon to avoid detection is both new and innovative. The new technique was spotted by researchers at Malwarebytes. They discovered the script embedded as described above, and designed to steal credit card data from sites making use of a popular WordPress ecommerce plugin called WooCommerce.

Full Article: https://www.aimcybersecurity.com/2020/07/10/hackers-used-favicon-website-to-steal-credit-card-information/