Malware Activity
Hiding in Plain Sight as Malware Abuses Trust and Everyday Technology
Recent research highlights two major cybercrime campaigns that show how attackers are becoming more subtle and deceptive in stealing sensitive data. In one case, hackers compromised Magento‑based online stores by hiding credit‑card‑stealing malware inside a nearly invisible, one‑pixel SVG image embedded directly in a website’s code. When customers clicked “checkout,” they were shown a convincing fake payment page that quietly captured and encrypted their card details before sending them to attacker‑controlled servers. In a separate campaign targeting macOS users, attackers used fake Apple‑themed web pages to trick victims into launching the built‑in Script Editor, a trusted macOS tool, to run hidden malicious code. This approach bypassed newer Apple security warnings and installed Atomic Stealer malware, which can harvest passwords, browser data, cryptocurrency wallets, and financial information.
