{"id":8304,"date":"2024-10-16T17:11:43","date_gmt":"2024-10-16T15:11:43","guid":{"rendered":"https:\/\/www.tidycode.it\/cosmicsting-and-the-attack-on-magento"},"modified":"2025-01-30T16:17:16","modified_gmt":"2025-01-30T15:17:16","slug":"cosmicsting-and-the-attack-on-magento","status":"publish","type":"post","link":"https:\/\/www.tidycode.it\/en\/cosmicsting-and-the-attack-on-magento","title":{"rendered":"CosmicSting and the attack on Magento"},"content":{"rendered":"\n

CosmicSting and the attack on Magento<\/h1><\/div>\n\n\n\n
\n

Why your eCommerce security is critical<\/p>\n\n\n\n

<\/div>\n\n\n\n
<\/span><\/a><\/span><\/a><\/span><\/a><\/div>\n\n\n\n
<\/div>\n<\/div>\n\n\n\n
\n
<\/div>\n<\/div>\n\n\n\n
\n
\n
\n
\n

In recent years, cyber attacks towards CMS (Content Management System) and eCommerce platforms have become increasingly sophisticated. One of the most recent and dangerous ones has been identified by Sansec<\/strong><\/a>, called CosmicSting<\/strong>, an attack that automatically targets platforms such as Magento<\/strong><\/a>, mass updating CMS blocks and compromising site security. <\/p>\n\n\n\n

But what is this attack? And why is it so important for eCommerce managers to understand the security risks to their platform? In this article, we will explore the details of the CosmicSting attack, why Magento is in the crosshairs, and how to protect your online business from increasingly complex threats. <\/p>\n<\/div>\n\n\n\n

\n
\"CosmicSting<\/figure>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n
<\/div>\n<\/div>\n\n\n\n
\n

CosmicSting: the automated attack on CMSs.<\/mark><\/h2>\n\n\n\n

CosmicSting <\/strong>is a sophisticated attack that exploits vulnerabilities in CMSs, particularly Magento<\/strong>, one of the most widely used eCommerce platforms in the world. This attack automates CMS block updates, modifying site content to insert malicious scripts. The group responsible, known as Peschanki<\/strong><\/a>, has developed a method that allows it to act on a large scale, affecting hundreds of websites at once. <\/p>\n\n\n\n

Malicious scripts embedded in CMS blocks can:<\/p>\n\n\n\n