· javascript
Sansec reports hackers infect 953 online stores, mostly Magento, with scanner-evading JavaScript
A small piece of code has been inserted onto the pages of 953 online storefronts.
This infiltration is part of a sustained operation that has been underway since July 2025.
The majority of the compromised sites utilize the Magento platform.
Sansec, a Dutch e-commerce security firm, reported on this extensive activity.
The mechanism involves adding this code so that when unsuspecting visitors access the pages, it triggers a malicious JavaScript loader.
This loading occurs specifically through Magento CMS blocks.
As Sansec noted, "When you" [the quote is incomplete in the source].
