Business
Business

HUNDREDS OF MAGENTO-HOSTED BUSINESSES SCANNED TO IDENTIFY FAKE PLUG-INS

Published by Gbaf News

Posted on November 8, 2014

2 min read
Add as preferred source on Google

Magento Merchants Targeted by Rogue Plugins

With hundreds of Magento-hosted e-businesses at risk from fraudulent hackers through the use of rogue plug-ins, an online website security scanner has confirmed 5% of 350 websites tested have been compromised.

Following an investigation into breached ecommerce merchants, Foregenix identified the fake plug-ins running on the Magento platform, posing a threat of data compromise to ecommerce businesses.

By simply entering the website URL into the online scanner, the Foregenix team has automatically assessed over 350 vulnerable sites and confirmed 5% of those scanned so far have been compromised.

Expert Insights on Magento Security Risks

Speaking about the threat, Director of Foregenix, Benjamin Hosack, said:

“Hackers are constantly innovating to find new and more intelligent ways of stealing sensitive and personal data as the identification of these rogue plug-ins prove.  Businesses must make security a priority and implement solutions that protects them as well as their customers from potential risk.

“These malicious modules permit remote and unauthorized access, allowing hackers to make modifications and harvest payment card details which could result in significant and expensive fraud liabilities for businesses.”

“Our online website scanner has identified a worrying number of affected businesses and there are without a doubt hundreds more that we haven’t been able to advise and mitigate the threat.”

Foregenix Website Scanner Uncovers Threats

With the potential to damage hundreds of businesses across the globe, Foregenix’s online website scanner has already been used by over 350 Magento businesses who wanted to identify if they were at risk.

Advice for Businesses to Stay Protected

Speaking about the scanner, Benjamin added:

“Our role as information security specialists allows us to spot patterns and trends in the type of attacks hackers are using.

“The best way for businesses to avoid this particular breach is to be aware of the dangers hackers pose and to be extra vigilant when using ecommerce platforms, paying particular attention to the plug-ins they download.

“Any Magento-based business that thinks it could be at risk should put their mind at ease and use our online scanner at www.foregenix.com/magento

Built on a solid reputation of trust and reliability, Foregenix are forerunners in information security; simplifying the compliance process and ensuring payment environments are secure.

Key Takeaways

  • Approximately 5% of 350 Magento‑hosted sites scanned by Foregenix were compromised via fake plug‑ins.
  • Rogue Magento extensions enable remote unauthorized access, data harvesting, and payment card theft.
  • Foregenix recommends vigilance with e‑commerce plug‑ins and offers a free online scanner for merchants.
  • Small to medium Magento businesses remain under‑served and at high risk due to basic security lapses.

References

Frequently Asked Questions

What percentage of Magento sites scanned were compromised?
Foregenix found that 5% of the 350 scanned Magento‑hosted businesses were compromised due to fake plug‑ins.
What risks do rogue Magento plug‑ins pose?
They allow remote unauthorized access, modifications, and payment card data harvesting, exposing businesses to fraud liabilities.
How can businesses check if they’re at risk?
By using Foregenix’s free online website scanner: enter the site URL to automatically assess for compromise.
What security advice does Foregenix give to businesses?
Be vigilant when selecting plug‑ins—only use trusted sources—and prioritize patching and security monitoring to avoid breaches.

Tags

Related Articles

More from Business

Explore more articles in the Business category